azbelt

azbelt Azure 관련 자격 증명을 열거하기 위한 독립형 DLL 및 sliver 확장주로 AAD 가입 머신에서 모듈 aadjoin - NetGetAadJoinInformation을 통해 머신의 AAD 상태 정보를 가져옵니다. credman - 자격 증명 관리자에서 자격 증명을 가져옵니다. env - 비밀을 포함할 수 있는 Azure/AAD 관련 환경 변수를 찾습니다. managed - 관리 ID가 있는 머신 정보를 얻기 위해 IMDS 엔드포인트를 호출합니다. msal - 다양한 MSAL 캐시에서 토큰을 찾습니다...

CVE-2026-84003

Authentication bypass by capture-replay in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to perform spoofing over a network...

EUVD-2026-73922

Authentication bypass by capture-replay in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-84003

Microsoft Authentication Library (MSAL) for Node.js is affected by an authentication bypass via capture-replay that allows an unauthorized network attacker to perform spoofing . The underlying cause is the ability to capture and replay authentication tokens, leading to high confidentiality and in...

Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability

Authentication bypass by capture-replay in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to perform spoofing over a network...

PT-2026-88147

Name of the Vulnerable Software and Affected Versions Microsoft Authentication Library MSAL for Node.js affected versions not specified Description An authentication bypass exists due to a capture-replay mechanism, which allows an unauthorized remote attacker to perform spoofing attacks over a...

CVE-2026-84003: Authentication Bypass by Capture-replay

Authentication bypass by capture-replay in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to perform spoofing over a network...

Malicious code in msal-browser-1p (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b048f9df96df1367009fbcb80c4ad7b3ed89133bfe1fd86324c74e1c2d681c81 The package msal-browser-1p was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-3419 Malicious code in msal-browser-1p (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b048f9df96df1367009fbcb80c4ad7b3ed89133bfe1fd86324c74e1c2d681c81 The package msal-browser-1p was found to contain malicious code. Source: ossf-package-analysis...

Fedora 44 : python-msal (2026-64b1c7aa6b)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-64b1c7aa6b advisory. Update to v1.36.0 Full changelog: https://github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.36.0 Tenable has extracted the...

Fedora 43 : python-msal (2026-891d8718e7)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-891d8718e7 advisory. Update to v1.36.0 Full changelog: https://github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.36.0 Tenable has extracted the...

org.webjars.npm:adal-node (0.1.28), org.webjars.npm:azure__msal-node (1.5.0) +7 more potentially affected by CVE-2025-65945 via org.webjars.npm:jws (>=3.2.2, <=4.0.0)

org.webjars.npm:jws MAVEN version =3.2.2, =1.6.1, =2.3.2, =5.5.4, =0.0.1, =1.0.0 Source cves: CVE-2025-65945 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-14188254...

Malicious Package

Overview eslint-plugin-custom-msal-w is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

EUVD-2024-1332

Malicious code in bioql PyPI...

Malicious code in msal-node2 (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41393 Malicious code in msal-node1 (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in msal-node1 (npm)

The package communicates with a domain associated with malicious activity...

CVE-2024-27086

The MSAL library enabled acquisition of security tokens to call protected APIs. MSAL.NET applications targeting Xamarin Android and .NET Android e.g., MAUI using the library from versions 4.48.0 to 4.60.0 are impacted by a low severity vulnerability. A malicious application running on a customer...

@adinsure-ops/ops-cli (5.3.2), @pnp/nodejs (>=4.0.0-alpha0-v4nightly.20240416, <=4.1.1) +1 more potentially affected by CVE-2024-35255 via @azure/msal-node (>=2.7.0, <=2.9.1)

@azure/msal-node NPM version =2.7.0, =4.0.0-alpha0-v4nightly.20240416, =4.1.1 - insomnia-plugin-azure-ad-authentication 1.1.2 Source cves: CVE-2024-35255 Source advisory: OSV:GHSA-M5VV-6R4H-3VJ9...

CVE-2024-27086 MSAL.NET applications targeting Xamarin Android and .NET Android (MAUI) susceptible to local denial of service

The MSAL library enabled acquisition of security tokens to call protected APIs. MSAL.NET applications targeting Xamarin Android and .NET Android e.g., MAUI using the library from versions 4.48.0 to 4.60.0 are impacted by a low severity vulnerability. A malicious application running on a customer...