423 matches found
aad-sso-enum-brute-spray
aad-sso-enum-brute-spray POC de la vulnerabilidad de fuerza bruta de contraseñas de Azure Active Directory recientemente revelada por SecureWorks Descripción Este código es una prueba de concepto de la vulnerabilidad de fuerza bruta de contraseñas de Azure Active Directory revelada recientemente,...
CVE-2025-53786
CVE-2025-53786 Exploit This project provides a proof-of-concept PoC exploit targeting a critical vulnerability in Microsoft Exchange Server hybrid deployments, identified as CVE-2025-53786. This vulnerability allows an attacker with administrative access to an on-premises Exchange server to...
caOptics
Note Project archived due to shifting development priorities and refocusing my community efforts to other areas PoCs, other tools and demos/presentation, project is set to read-only. CA Optics - Azure AD Conditional Access Gap Analyzer What is Conditional Access? Notes for early testers Release...
Azure-AccessPermissions
Azure-AccessPermissions Easy to use PowerShell script to enumerate access permissions in an Azure Active Directory environment. Background details can be found in the accompanied blog posts: Untangling Azure Active Directory Principals & Access Permissions Untangling Azure Active Directory...
CVE-2026-83711 Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
...
CVE-2026-83711: Authorization Bypass Through User-Controlled Key
Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network...
The vulnerability of the cloud platform for managing and protecting Microsoft Entra ID (formerly Azure Active Directory) is related to deserialization flaws, allowing attackers to execute arbitrary code.
The vulnerability of the cloud-based platform for managing and protecting Microsoft Entra ID formerly Azure Active Directory is related to deficiencies in deserialization mechanisms. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
EUVD-2026-63692
Server-side request forgery ssrf in Azure Active Directory allows an authorized attacker to elevate privileges over a network...
CVE-2026-69851
Server-side request forgery ssrf in Azure Active Directory allows an authorized attacker to elevate privileges over a network...
CVE-2026-69851
An SSRF vulnerability in Microsoft Entra ID (Azure Active Directory) allows an authorized attacker to elevate privileges over a network. CVSS 9.9 (critical) reflects network access, low complexity, and full confidentiality/integrity/availability impact. Exploitation status and patch details are n...
Microsoft Entra ID Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Azure Active Directory allows an authorized attacker to elevate privileges over a network...
CVE-2026-69851: Server-Side Request Forgery (SSRF)
Server-side request forgery ssrf in Azure Active Directory allows an authorized attacker to elevate privileges over a network...
PT-2026-79215
Name of the Vulnerable Software and Affected Versions Azure Active Directory affected versions not specified Description Server-side request forgery SSRF, a flaw where an attacker induces a server-side application to make requests to an unintended location, exists in Azure Active Directory. This...
EUVD-2026-54315
Modification of assumed-immutable data maid in Azure Active Directory allows an authorized attacker to elevate privileges over a network...
CVE-2026-50481
Modification of assumed-immutable data maid in Azure Active Directory allows an authorized attacker to elevate privileges over a network...
CVE-2026-50481
Modification of assumed-immutable data maid in Azure Active Directory allows an authorized attacker to elevate privileges over a network...
CVE-2026-50481
CVE-2026-50481 affects Azure Active Directory, where modification of assumed-immutable data (maid) enables an authorized attacker to elevate privileges over a network. The CVSS data indicates NETWORK attack vector, LOW access complexity, LOW privileges required, and HIGH confidentiality/integrity...
