CobaltBus

CobaltBus Integración de C2 Externo de Cobalt Strike con Azure Servicebus, tráfico C2 a través de Azure Servicebus Configuración 1. Crear un Azure Service Bus 2. Crear una política de acceso compartido cadena de conexión que solo pueda enviar y escuchar 3. Editar la variable estática...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: grafana, kwok, keda, cloud-provider-aws, kube-vip-cloud-provider, metrics-server, rancher, spqr, cert-manager, openfga, apisix-ingress-controller, datadog-operator, telegraf, spicedb, cass-operator, rke2-cloud-provider, openbao, rancher-agent,...

GO-2026-5224 vulnerabilities

Vulnerabilities for packages: rancher-agent, rancher, azure-service-operator...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kpt, nats-server-config-reloader, witness, cni-plugins, cloud-provider-gcp-cloud-controller-manager, containerd, ipfs-cluster, flux, terraform-mcp-server, chart-testing, wgcf, nri-memcached, wal-g, portieris, k3d, gcsfuse, nri-nginx,...

The vulnerability of Azure Service Bus, a cloud-based asynchronous messaging platform, is related to deficiencies in the deserialization mechanism. This allows attackers to execute arbitrary code.

The vulnerability of Azure Service Bus, a cloud-based asynchronous messaging platform, is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...

EUVD-2026-54324

Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network...

CVE-2026-50515

Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network...

CVE-2026-50515 Azure Service Bus Remote Code Execution Vulnerability

...

CVE-2026-50515

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-50515 Azure Service Bus Remote Code Execution Vulnerability

...

CVE-2026-50515

Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network...

Azure Service Bus Remote Code Execution Vulnerability

Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network...

CVE-2026-50515: Deserialization of Untrusted Data

Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network...

KLA91193 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Azure Service Bus can be exploited...

PYSEC-2026-2344 Apache Airlfow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access

The accesskey and connectionstring connection properties were not marked as sensitive names in secrets masker. This means that user with read permission could see the values in Connection UI, as well as when Connection was accidently logged to logs, those values could be seen in the logs. Azure...

Apache Airlfow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access

The accesskey and connectionstring connection properties were not marked as sensitive names in secrets masker. This means that user with read permission could see the values in Connection UI, as well as when Connection was accidently logged to logs, those values could be seen in the logs. Azure...

PT-2026-59027

The access key and connection string connection properties were not marked as sensitive names in secrets masker. This means that user with read permission could see the values in Connection UI, as well as when Connection was accidently logged to logs, those values could be seen in the logs. Azure...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: trivy, crossplane-provider-aws-osis, kine, crossplane-provider-aws-cognitoidentity-fips, crossplane-provider-aws-servicediscovery-fips, external-secrets-operator-fips, crossplane-provider-aws-backup, crossplane-provider-aws-emr, crossplane-provider-aws-elbv2,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: apm-server, trivy, kine, kubernetes-csi-driver-nfs, terraform-mcp-server, external-secrets-operator-fips, crossplane-provider-aws-backup, seaweedfs-operator-fips, vertical-pod-autoscaler-fips, crossplane-provider-gcp-beta-networksecurity, commercial-grafana,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: apm-server, trivy, kine, kubernetes-csi-driver-nfs, terraform-mcp-server, external-secrets-operator-fips, crossplane-provider-aws-backup, seaweedfs-operator-fips, vertical-pod-autoscaler-fips, crossplane-provider-gcp-beta-networksecurity, commercial-grafana,...