1178 matches found
AzureHound
AzureHound Коллектор данных BloodHound для Microsoft Azure Получить AzureHound Готовые бинарные файлы Загрузите подходящий бинарный файл для вашей платформы из одного из наших Релизов. Плавающий релиз Плавающий релиз содержит предварительно собранные бинарные файлы, которые автоматически...
offensive-azure
Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic. The current list of tools can be found below with a brief description of their functionality. ./DeviceCode/devicecodeeasymode.py Generates a code to be entered by the target user Can be used for...
offensive-azure
Набор атакующих инструментов, нацеленных на Microsoft Azure, написанных на Python для кроссплатформенной работы. Текущий список инструментов приведён ниже с кратким описанием их функциональности. ./DeviceCode/devicecodeeasymode.py Генерирует код, который должен ввести целевой пользователь Может...
cloudsploit
CloudSploit by Aqua - Cloud Security Scans Quick Start Generic $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker build . -t cloudsploit:0.0.1 $...
oauthseeker
OAuthSeeker OAuthSeeker 는 Microsoft Azure 및 Office365 내에서 사용자 ID를 손상시키기 위해 악성 OAuth 애플리케이션을 사용하여 피싱 공격을 수행하는 레드 팀 도구입니다. 🚀 주요 기능 OAuthSeeker는 다음과 같은 주요 기능을 제공합니다: Azure App OAuth 피싱: Microsoft Azure 및 Office365 사용자를 대상으로 OAuth 피싱 공격을 수행하여 Microsoft Graph API 및 Microsoft Azure 리소스에 대한 액세스 권한을 얻습니다...
AzureADAssessment
Microsoft Azure AD 평가 평가자 가이드 고객을 위해 평가를 수행하는 Microsoft 직원 또는 파트너인 경우 Wiki의 평가 가이드를 참조하세요. PowerShell 갤러리에서 설치 오류가 발생하면 이 문서 끝에 있는 FAQ 섹션을 참조하세요. Install-Module AzureADAssessment -Force -Scope CurrentUser If you have already installed the module, run the following instead to ensure you have the...
Security Bulletin: IBM QRadar SIEM interation for Microsoft Azure Event Hub contains components with known vulnerabilities
Summary Multiple components with known vulnerabilities were addressed in IBM QRadar SIEM integration with Microsoft Azure Event Hub Vulnerability Details CVEID:CVE-2026-66257 DESCRIPTION: A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion...
CVE-2026-97955
A flaw was found in the Microsoft Azure Network Adapter MANA driver in the Linux kernel. A local user with network administrative privileges can cause a denial of service DoS or potentially execute arbitrary code due to a use-after-free vulnerability. When attaching an eXpress Data Path XDP progr...
Linux Distros Unpatched Vulnerability : CVE-2026-93853
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots...
The vulnerability of the compatibility package for Microsoft Azure Entra ID lies in insufficient validation of requests on the server side, allowing attackers to escalate their privileges.
The vulnerability of the compatibility package for Microsoft Azure Entra ID is related to insufficient validation of requests at the server-side. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
DEBIAN-CVE-2026-93853
Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...
CVE-2026-93853
Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...
UBUNTU-CVE-2026-93853
Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...
CVE-2026-93853
Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...
CVE-2026-93853
Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...
CVE-2026-93853
The Barman backup tool is vulnerable to unverified ownership during snapshot backup deletion, affecting versions up to and including 3.20.0 (specifically versions from 3.4.0 for Google Cloud, 3.6.0 for Azure, and 3.7.0 for AWS). The root cause is that Barman reads snapshot identifiers from the ba...
CVE-2026-93853 Barman snapshot backup deletion trusts unverified backup catalog metadata
Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...
CVE-2026-93853 Barman snapshot backup deletion trusts unverified backup catalog metadata
Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...
EUVD-2026-89463
Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...
CVE-2026-93853: Unverified Ownership
Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...