154 matches found
CVE-2025-40019-POC
proof of concept for CVE-2025-40019 CVE-2025-40019 is the Encrypted Salt-Sector Initialization Vector mechanism crypto/essiv.c which has insufficient validation of Associated Authentication Data AAD length relative to the Initialization Vector IV size, leading to out-of-bounds memory access. The...
azbelt
azbelt Standalone DLL and sliver extension for enumerating Azure related credentials, primarily on AAD joined machines Modules aadjoin - Gets info about machine AAD status via NetGetAadJoinInformation credman - Gets credentials from Credential Manager env - Looks for Azure/AAD specific...
TokenMan
Access and Refresh Token Suite. Token Man is a tool for supporting post-exploitation activities using AAD access and/or refresh tokens. Table of Contents Usage Commands Fetch Search Swap FOCI Application Client ID Map AZ OAuth Usage usage: tokenman.py -h fetch,search,swap,az,oauth ... Token Man -...
Azure-AccessPermissions
Azure-AccessPermissions Easy to use PowerShell script to enumerate access permissions in an Azure Active Directory environment. Background details can be found in the accompanied blog posts: Untangling Azure Active Directory Principals & Access Permissions Untangling Azure Active Directory...
EUVD-2026-108539
Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network...
aad-fastapi-dl37 (>=1.0.0, <=1.0.2), agentstack-cli (>=0.4.0rc1, <=0.7.1) +301 more potentially affected by CVE-2026-114618 via authlib (>=1.0.0b2, <=1.8.0)
authlib PYPI version =1.0.0b2, =1.0.0, =0.4.0rc1, =0.1.0, =2.0.0, =2.0.0, =0.1.0, =0.5.0, =1.3.0a20250904, =1.2.0a20250730, =1.2.0a20250730, =0.0.0, =0.9.5, =1.7.0, =0.0.1, =0.1.0 and more Source cves: CVE-2026-114618 Source advisory: SNYK:PYTHON-AUTHLIB-21460692...
CVE-2026-97785
Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-97785
The AAD App Proxy is affected by an improper authentication vulnerability (CWE-287) that allows an unauthorized attacker to elevate privileges over a network. The vulnerability has a CRITICAL base severity score of 10.0. While the documents confirm the impact of unauthorized privilege escalation,...
AAD App Proxy Elevation of Privilege Vulnerability
Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network...
PT-2026-121681
Name of the Vulnerable Software and Affected Versions AAD App Proxy affected versions not specified Description Improper authentication allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version that contains ...
KLA91369 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure AI Foundry can be exploited remotely to gain...
Ivanti EPMM Authentication Bypass (CVE-2023-35078)
Exploits CVE-2023-35078 in Ivanti Endpoint Manager Mobile EPMM: unauthenticated access to /mifs/aad/api/v2/admins/users allows reading admin accounts and creating a new local administrator. !/usr/bin/env python3 -- coding: utf-8 -- """Ivanti EPMM unauthenticated admin API access CVE-2023-35078.""...
Malicious code in hitale-irhr-aad (npm)
Source: amazon-inspector 82a207ac1b39e4629e45a699470fb9257c5344fd657a79d9cf4872741783745c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
SUSE CVE-2026-80832
In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qceaeadccmpreparebufassoclen can be smaller than the length later programmed into the DMA scatterlist. The allocation size is currently calculated as:...
CVE-2026-80832
In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qceaeadccmpreparebufassoclen can be smaller than the length later programmed into the DMA scatterlist. The allocation size is currently calculated as:...
CVE-2026-80832 crypto: qce - fix CCM AAD buffer underallocation
In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qceaeadccmpreparebufassoclen can be smaller than the length later programmed into the DMA scatterlist. The allocation size is currently calculated as:...
CVE-2026-80832
CVE-2026-80832 is a buffer underallocation flaw in the Linux kernel's QCE (Qualcomm Crypto Engine) crypto driver , specifically in qce_aead_ccm_prepare_buf_assoclen(). The AAD buffer size is computed as ALIGN(assoclen, 16) + MAX_CCM_ADATA_HEADER_LEN, while the DMA scatterlist length uses ALIGN(as...
EUVD-2026-71282
In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qceaeadccmpreparebufassoclen can be smaller than the length later programmed into the DMA scatterlist. The allocation size is currently calculated as:...
CVE-2026-80832 crypto: qce - fix CCM AAD buffer underallocation
In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qceaeadccmpreparebufassoclen can be smaller than the length later programmed into the DMA scatterlist. The allocation size is currently calculated as:...
CVE-2026-80832
In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation The AAD buffer allocated in qceaeadccmpreparebufassoclen can be smaller than the length later programmed into the DMA scatterlist. The allocation size is currently calculated as:...