13692 matches found
offensive-azure
Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic. The current list of tools can be found below with a brief description of their functionality. ./DeviceCode/devicecodeeasymode.py Generates a code to be entered by the target user Can be used for...
azpim
Azure PIM CLI azpim Uma ferramenta de interface de linha de comando para gerenciar ativações de funções do Azure Privileged Identity Management PIM diretamente do seu terminal. Recursos 🔐 Ativação de Funções - Ative rapidamente funções elegíveis do Azure PIM 🔓 Desativação de Funções - Desative...
attack-stix-data
ATT&CK® STIX Data MITRE ATT&CK is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and ...
PT-2026-80916
Relative path traversal vulnerability in Apache Camel Azure-Storage Datalake component This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-datalake component can download an Azure Data Lake Storage Gen2 file to t...
PT-2026-80918
Relative path traversal vulnerability in Apache Camel Azure Storage Blob component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-blob component can download an Azure Storage blob to the local filesystem...
AzureADAssessment
Microsoft Azure AD Assessment Guida per il valutatore Se sei un dipendente Microsoft o un partner che esegue la valutazione per un cliente, consulta il Wiki per la Guida alla valutazione. Installazione dalla PowerShell Gallery Se riscontri errori, consulta la sezione FAQ alla fine di questo...
CloudPentestCheatsheets
CloudPentestCheatsheets Dieses Repository enthält eine Sammlung von Cheatsheets, die ich für Tools zusammengestellt habe, die mit dem Pentesting von Organisationen zu tun haben, die Cloud-Anbieter nutzen. Der Schwerpunkt liegt auf offensiver Cloud-Enumeration und dem schnellen Verständnis einer...
CVE-2026-69502
Server-side request forgery ssrf in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-69502
CVE-2026-69502 is a server-side request forgery (SSRF) vulnerability in Azure SQL Database that allows an unauthorized, network-based attacker to elevate privileges . The CNA-assigned CVSS 3.1 score is 10.0 (Critical) with a vector of AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N, indicating no privileges ...
EUVD-2026-63994
Server-side request forgery ssrf in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-69502 Azure SQL Database Elevation of Privilege Vulnerability
...
CVE-2026-69502 Azure SQL Database Elevation of Privilege Vulnerability
...
CVE-2026-32637 vulnerabilities
Vulnerabilities for packages: velero-plugin-for-aws, velero-plugin-for-microsoft-azure, velero-plugin-for-gcp-fips, velero-plugin-for-microsoft-azure-fips, velero-plugin-for-aws-fips, velero-plugin-for-gcp...
CVE-2026-32637 vulnerabilities
Vulnerabilities for packages: velero-plugin-for-aws, velero-plugin-for-microsoft-azure...
GHSA-J2G6-362Q-6QC6 vulnerabilities
Vulnerabilities for packages: velero-plugin-for-aws, velero-plugin-for-microsoft-azure...
EUVD-2026-63630
Server-side request forgery ssrf in Microsoft Copilot in Azure allows an authorized attacker to disclose information over a network...
EUVD-2026-63692
Server-side request forgery ssrf in Azure Active Directory allows an authorized attacker to elevate privileges over a network...