13698 matches found
Azure CLI Credentials Gatherer
This module will collect the Azure CLI 2.0+ az cli settings files for all users on a given target. These configuration files contain JWT tokens used to authenticate users and other subscription information. Once tokens are stolen from one host, they can be used to impersonate the user from a...
CBL Mariner 2.0 Security Update: azure-iot-sdk-c (CVE-2024-27099)
The version of azure-iot-sdk-c installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27099 advisory. - The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an...
CBL Mariner 2.0 Security Update: azure-iot-sdk-c (CVE-2024-21646)
The version of azure-iot-sdk-c installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21646 advisory. - Azure uAMQP is a general purpose C library for AMQP 1.0. The UAMQP library is used by several clien...
CBL Mariner 2.0 Security Update: azure-iot-sdk-c (CVE-2024-25110)
The version of azure-iot-sdk-c installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-25110 advisory. - The UAMQP is a general purpose C library for AMQP 1.0. During a call to opengetofferedcapabilities,...
GO-2024-2918 Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/Azure/azure-sdk-for-go/sdk/azidentity
Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/Azure/azure-sdk-for-go/sdk/azidentity...
Azure IoT Platform Device SDK Double Free Vulnerability
...
Azure C SDK Integer Wraparound Vulnerability
...
CVE-2024-25110
...
GO-2024-2941 ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik
ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/traefik/traefik...
The vulnerability of the DefaultAzureCredential and ManagedIdentityCredential components of the Azure Identity Libraries and Microsoft Authentication Library allows a perpetrator to escalate their privileges.
The vulnerability of the DefaultAzureCredential and ManagedIdentityCredential components in the Azure Identity Libraries and Microsoft Authentication Library authentication libraries is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow attacke...
The vulnerability of the Microsoft Azure File Sync data synchronization service lies in the improper handling of symbolic links before accessing files. This allows attackers to circumvent existing security restrictions and enhance their privileges.
The vulnerability of the Microsoft Azure File Sync data synchronization service is related to the incorrect definition of symbolic links before accessing a file. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions and enhance their privileges...
Malicious code in DistributedLocks.AzureStorage.Net (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4471 Malicious code in DistributedLocks.AzureStorage.Net (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in eu.tsystems.mms.tic.testerra.plugins.azuredevops.annotation.azuretest (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2338 Malicious code in eu.tsystems.mms.tic.testerra.plugins.azuredevops.annotation.azuretest (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in azure-rest-api-specs-tests (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1799 Malicious code in azure-rest-api-specs-tests (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in azure-rest-api-specs-eng-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 34ba9e800ce9823b7e1b4b90d47a87eafdfb783d616caa8a69bf93f55ee0a9b5 The OpenSSF Package Analysis project identified 'azure-rest-api-specs-eng-tools' @ 1.0.1 npm as malicious. It is considered malicious because: -...
MAL-2024-1798 Malicious code in azure-rest-api-specs-eng-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 34ba9e800ce9823b7e1b4b90d47a87eafdfb783d616caa8a69bf93f55ee0a9b5 The OpenSSF Package Analysis project identified 'azure-rest-api-specs-eng-tools' @ 1.0.1 npm as malicious. It is considered malicious because: -...
XMGoat - Composed of XM Cyber terraform templates that help you learn about common Azure security issues
XM Goat is composed of XM Cyber terraform templates that help you learn about common Azure security issues. Each template is a vulnerable environment, with some significant misconfigurations. Your job is to attack and compromise the environments. Here's what to do for each environment: 1. Run...