1056 matches found
Brazilian Banks Targeted by New AllaKore RAT Variant Called AllaSenha
Brazilian banking institutions are the target of a new campaign that distributes a custom variant of the Windows-based AllaKore remote access trojan RAT called AllaSenha. The malware is "specifically aimed at stealing credentials that are required to access Brazilian bank accounts, and leverages...
KLA67625 PE vulnerability in Microsoft Azure
An elevation of privilege vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-30060 Related products Microsoft-Azure CVE list CVE-2024-30060 critical KB list Solution Install necessary updates from the KB...
It's Time to Master the Lift & Shift: Migrating from VMware vSphere to Microsoft Azure
While cloud adoption has been top of mind for many IT professionals for nearly a decade, it's only in recent months, with industry changes and announcements from key players, that many recognize the time to make the move is now. It may feel like a daunting task, but tools exist to help you move...
Microsoft Azure Migrate Auto Update < 6.1.294.1008 XSS
The version of Microsoft Azure Migrate installed on the remote Windows host is prior to 6.1.294.1008. It is, therefore, affected by a cross-site scripting vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...
Microsoft Azure Migrate 跨站脚本漏洞
Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft Corporation USA. Please stay tuned to CNNVD or vendor announcements for information about a cross-site scripting vulnerability in Microsoft Azure Migrate...
KLA67390 XSS vulnerability in Microsoft Azure
XSS vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to perform cross-site scripting attack. Original advisories CVE-2024-30053 Related products Microsoft-Azure CVE list CVE-2024-30053 high Solution Install necessary updates from the KB section, that are...
Microsoft Azure Command-Line Interface (CLI) Installed (Linux)
Binary data microsoftazureclinixinstalled.nbin...
Findings Show MFA Bypass in Microsoft Azure Entra ID Using Seamless SSO
By Waqas Concerned about a potential MFA bypass in Microsoft Azure Entra ID? This article explores the research, explains the vulnerability in context, and offers actionable steps to secure your organization. This is a post from HackRead.com Read the original post: Findings Show MFA Bypass in...
USN-6766-1: Linux kernel vulnerabilities
It was discovered that the Open vSwitch implementation in the Linux kernel could overflow its stack during recursive action operations under certain conditions. A local attacker could use this to cause a denial of service system crash. CVE-2024-1151 Sander Wiebing, Alvise de Faveri Tron, Herbert...
Microsoft Azure CLI Confcom Extension < 0.3.4 Privilege Escalation
An elevation of privilege vulnerability exists in Microsoft Azure CLI Confcom extension. An unauthenticated, remote attacker can exploit this, to gain elevated privileges. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
Microsoft Azure Command-Line Interface (CLI) Extensions Installed (Windows)
Binary data azurecliextensionswindetect.nbin...
Microsoft Azure CLI Confcom Extension < 0.3.3 Privilege Escalation
An elevation of privilege vulnerability exists in Microsoft Azure CLI Confcom extension. An unauthenticated, remote attacker can exploit this, to gain elevated privileges. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
USN-6743-3: Linux kernel (Azure) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - JFS file system; - BPF subsystem; - Netfilter; CVE-2023-52600, CVE-2024-26589, CVE-2024-26591, CVE-2024-26581,...
USN-6742-2: Linux kernel vulnerabilities
Daniele Antonioli discovered that the Secure Simple Pairing and Secure Connections pairing in the Bluetooth protocol could allow an unauthenticated user to complete authentication without pairing credentials. A physically proximate attacker placed between two Bluetooth devices could use this to...
Microsoft Azure ODSP nikisos Uncontrolled Search Path Element Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of ODSP for Microsoft Azure. Authentication is not required to exploit this vulnerability. The specific flaw exists within the installation of ODSP. When installed from the official Microsoft GitHub...
Microsoft Azure Web App Discovery And Assessment Service Installed (Windows)
Binary data microsoftazurewebappdiscoveryandassessmentservicewininstalled.nbin...
Microsoft Azure Appliance Configuration Manager Installed (Windows)
Binary data microsoftazureapplianceconfigurationmanagerwininstalled.nbin...
Microsoft Azure Discovery Service Installed (Windows)
Binary data microsoftazurediscoveryservicewininstalled.nbin...
Microsoft Azure Migrate Auto Update < 6.1.294.1003 RCE
The version of Microsoft Azure Appliance Auto Update, a component of Microsoft Azure Migrate, installed on the remote Windows host is prior to 6.1.294.1003. It is, therefore, affected by an unspecified remote code execution vulnerability. Note that Nessus has not tested for these issues but has...