APEX

APEX precedentemente AzurePwn- Framework di Post Exploitation per Azure Un tentativo di semplificare le attività di post-ex una volta ottenuto un qualche tipo di credenziali per un account correlato ad Azure. Ad essere onesti, non è nulla di nuovo o di spettacolare. Solo il mio vecchio culo pigro...

AzureRT

AzureRT Modulo PowerShell che implementa vari cmdlet per interagire con Azure e Azure AD da una prospettiva offensiva. Utilità utili per la gestione dell'autenticazione basata su token di accesso, passaggio dalle interfacce Az a AzureAD e az cli, attacchi predefiniti facili da usare come...

SecretsStalker

secretstalker / / / / / / / / / / / \ / - / - -/ /\ \ / / // / ' / -/ / // // / / / / /, /// /\// root@kitploit: ╔╦╦╬╬╬╬╬╬╦╦╗ ╔╬╬╬╝╝┘ ╚╝╝╬╬╬┐ ╬╬╝╚╩╬╗╔ ╚╬╬╬ ╬╝ ╚╬╬╗╗ ╔ ╚╬╗ ╬╬ ╔╗ ╚╬╬╬╬╬╬╦ ╬╬ we found your secret... ╔╬┤ ╬╬╬ ╬╬╬╬╬╬╬╬╝╝╝╬╬╗ ...now let's see what it ╬╬┤ ╚╩┘ ╚╬╬╬╬╬╩ ╠╬╬ can REALLY do...

Azure

Toolkit di Sicurezza Offensiva per Azure Una raccolta di script Bash e PowerShell per valutazioni di sicurezza su Azure, che coprono escalation dei privilegi IAM, sicurezza dei container, esposizione di Key Vault, configurazione di Entra ID e altro. Progettati per essere eseguiti in Azure Cloud...

CVE-2026-68870

The Azure Key Vault secrets backend in Apache Airflow's Microsoft Azure provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with this backend, a caller in one team could resolve a...

CVE-2026-68870

The CVE-2026-68870 entry details a vulnerability in the Azure Key Vault secrets backend of Apache Airflow’s Microsoft Azure provider. In multi-team deployments, if a team-scoped lookup misses, a team-agnostic lookup can resolve a secret id that encodes another team’s namespace, allowing a caller ...

EUVD-2026-55695

The Azure Key Vault secrets backend in Apache Airflow's Microsoft Azure provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with this backend, a caller in one team could resolve a...

CVE-2026-68870

The Azure Key Vault secrets backend in Apache Airflow's Microsoft Azure provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with this backend, a caller in one team could resolve a...

CVE-2026-68870 Apache Airflow Microsoft Azure provider: microsoft.azure Key Vault backend: team-scope guard bypass resolves another team's Connection or Variable

The Azure Key Vault secrets backend in Apache Airflow's Microsoft Azure provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with this backend, a caller in one team could resolve a...

CVE-2026-68870 Apache Airflow Microsoft Azure provider: microsoft.azure Key Vault backend: team-scope guard bypass resolves another team's Connection or Variable

The Azure Key Vault secrets backend in Apache Airflow's Microsoft Azure provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with this backend, a caller in one team could resolve a...

CVE-2026-62825

Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-62825 Azure Key Vault Elevation of Privilege Vulnerability

...

CVE-2026-62825

Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-62825 Azure Key Vault Elevation of Privilege Vulnerability

...

EUVD-2026-48459

Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-62825

CVE-2026-62825 : Azure Key Vault suffers an elevation of privilege due to improper authentication. The entry is reported as a network-based, unauthenticated attack with a CVSS v3.1 base score of 10 (Critical), affecting integrity and availability (I=HIGH, A=HIGH) while confidentiality is None. Th...

PT-2026-64210

Name of the Vulnerable Software and Affected Versions Azure Key Vault affected versions not specified Description Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer...

Azure Key Vault Elevation of Privilege Vulnerability

Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network...

KLA91177 PE vulnerabilities in Microsoft Office

Privilege escalation vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure DNS can be exploited remotely to gain privileges. 2. An...

Important: Red Hat Security Advisory: external secrets operator for Red Hat OpenShift 1.0.1

external secrets operator for Red Hat OpenShift 1.0.1 The External Secrets Operator for Red Hat OpenShift builds on top of Kubernetes, which integrates external secret management systems like AWS Secrets Manager, HashiCorp Vault, Google Secrets Manager, Azure Key Vault, IBM Cloud Secrets Manager,...