AzureHound

AzureHound The BloodHound data collector for Microsoft Azure Get AzureHound Release Binaries Download the appropriate binary for your platform from one of our Releases. Rolling Release The rolling release contains pre-built binaries that are automatically kept up-to-date with the main branch and...

AzureADAssessment

Microsoft Azure AD Assessment Assessor Guide If you are a Microsoft employee or partner performing the assessment for a customer please see the Wiki for the Assessment Guide. Install from the PowerShell Gallery If you run into any errors please see the FAQ section at the end of this document...

oauthseeker

OAuthSeeker OAuthSeeker is an red team tool for performing phishing attacks using malicious OAuth applications to compromise user identities within Microsoft Azure and Office365. 🚀 Key Features OAuthSeeker provides the following key features: Azure App OAuth Phishing: Perform OAuth phishing attac...

cloudsploit

CloudSploit by Aqua - Cloud Security Scans Quick Start Generic $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker build . -t cloudsploit:0.0.1 $...

offensive-azure

Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic. The current list of tools can be found below with a brief description of their functionality. ./DeviceCode/devicecodeeasymode.py Generates a code to be entered by the target user Can be used for...

KLA91369 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure AI Foundry can be exploited remotely to gain...

Microsoft Azure AI Foundry server-side request forgery vulnerability

Microsoft Azure AI Foundry has a server-side request forgery vulnerability. This vulnerability stems from its susceptibility to server-side request forgery attacks, which may allow authorized attackers to escalate their privileges over the network...

Microsoft Azure Pipelines command injection vulnerability

Microsoft Azure Pipelines has a command injection vulnerability. This vulnerability stems from improper neutralization of special elements within commands, potentially allowing unauthenticated attackers to execute code over the network...

Veeam Plug-In for Microsoft Azure Appliance Service Fails to Start After .NET Update with "System.IO.IOException: The system cannot open the device or file specified" Error

Challenge After installing pending operating system updates on the Veeam Plug-In for Microsoft Azure appliance, the update process fails during finalization and the appliance web UI becomes unavailable. The Veeam Azure Backup service starts and then stops with exit code 255, and the following err...

CVE-2026-69454

Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network...

CVE-2026-69577

Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network...

CVE-2026-69577

The Microsoft Azure Attestation service and Device Health Attestation Service are affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an unauthorized attacker to disclose information over a network . The vulnerability has a HIGH base severity score of 7.5, as it is remotel...

EUVD-2026-99900

Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network...

EUVD-2026-99893

Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network...

CVE-2026-69454

The Microsoft Azure Attestation service and Device Health Attestation Service are affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability has a CVSS 3.1 score of 7.5 (High) and is mitigated by a...

Vulnerabilities in Microsoft Azure

Microsoft has identified vulnerabilities in various Azure components, including Key Vault, DevOps, API Center, and Storage. Malicious actors could exploit these vulnerabilities to circumvent security measures, gain elevated privileges, execute arbitrary code, and access sensitive data. The...

Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network...

Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network...

KLA91335 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability i...

PT-2026-112055

Name of the Vulnerable Software and Affected Versions Microsoft Azure Attestation service affected versions not specified Device Health Attestation Service affected versions not specified Description An out-of-bounds read exists in the Microsoft Azure Attestation service and Device Health...