Microsoft Azure IoT Explorer code-related vulnerabilities

Microsoft Azure IoT Explorer is a free and open-source desktop application developed by Microsoft Corporation. There are code-related vulnerabilities in Microsoft Azure IoT Explorer. Attackers exploit these vulnerabilities to carry out deceptive attacks...

Microsoft Azure MCP Server Tools code-related vulnerabilities

Microsoft Azure MCP Server Tools is a model context protocol of the American company Microsoft. It supports various tools, languages, and frameworks, enabling the construction and deployment of applications on Azure. There are code-related vulnerabilities in Microsoft Azure MCP Server Tools...

Microsoft Azure Connected Machine Agent security vulnerabilities

Microsoft Azure Connected Machine Agent is a core component of Microsoft that connects non-Azure servers to the Azure console. There is a security vulnerability present in Microsoft Azure Connected Machine Agent. Attackers can exploit this vulnerability to gain higher privileges...

Microsoft Azure Linux Virtual Machines security vulnerabilities

Microsoft Azure Linux Virtual Machines are cloud computing infrastructure resources provided by Microsoft. They are on-demand, elastic, and support multiple mainstream Linux distributions. There are security vulnerabilities associated with Microsoft Azure Linux Virtual Machines. Attackers can...

Microsoft Azure IoT Explorer security vulnerabilities

Microsoft Azure IoT Explorer is a free and open-source desktop application developed by Microsoft Corporation. There are security vulnerabilities present in Microsoft Azure IoT Explorer. Attackers can exploit these vulnerabilities to obtain sensitive information...

PT-2026-24266

Name of the Vulnerable Software and Affected Versions Microsoft Windows Admin Center affected versions not specified Description An improper access control issue exists in the Azure Portal Windows Admin Center. This allows an authorized attacker to elevate privileges locally. Recommendations At t...

Microsoft Azure IoT Explorer security vulnerabilities

Microsoft Azure IoT Explorer is a free and open-source desktop application developed by Microsoft Corporation. There are security vulnerabilities present in Microsoft Azure IoT Explorer. Attackers can exploit these vulnerabilities to obtain sensitive information...

PT-2026-24268

Уязвимость программного обеспечения Azure IoT Explorer связана с передачей критичной информации открытым текстом. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, раскрыть защищаемую информацию...

PT-2026-24270

Уязвимость расширения для управления виртуальными машинами Azure Azure Diagnostics для Linux Virtual Machines связана с переполнением буфера в динамической памяти. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии...

CVE-2026-23660: Improper Access Control

Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally...

CVE-2026-26118: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Azure MCP Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-26117: Authentication Bypass Using an Alternate Path or Channel

Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally...

CVE-2026-26121: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-26141: Improper Authentication

Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally...

CVE-2026-23665: Heap-based Buffer Overflow

Heap-based buffer overflow in Azure Linux Virtual Machines allows an authorized attacker to elevate privileges locally...

CVE-2026-23662: Missing Authentication for Critical Function

Missing authentication for critical function in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...

CVE-2026-26148: External Initialization of Trusted Variables or Data Stores

External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally...

PT-2026-24269

Name of the Vulnerable Software and Affected Versions Azure IoT Explorer affected versions not specified Description An improper restriction of the communication channel to intended endpoints in Azure IoT Explorer can allow an unauthorized attacker to disclose information over a network. The issu...

KLA90924 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to spoof user interface, bypass security restrictions, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Azure IOT...

Azure Blob Storage detection

Detects Azure Blob Storage REST API x-ms- headers or Azure error body. !/usr/bin/env python3 -- coding: utf-8 -- """Détection Azure Blob Storage exposé.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Azure Blob...