1059 matches found
AzureHound
AzureHound The BloodHound data collector for Microsoft Azure Get AzureHound Release Binaries Download the appropriate binary for your platform from one of our Releases. Rolling Release The rolling release contains pre-built binaries that are automatically kept up-to-date with the main branch and...
offensive-azure
Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic. The current list of tools can be found below with a brief description of their functionality. ./DeviceCode/devicecodeeasymode.py Generates a code to be entered by the target user Can be used for...
cloudsploit
CloudSploit by Aqua - Cloud Security Scans Quick Start Generic root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker buil...
offensive-azure
Colección de herramientas ofensivas dirigidas a Microsoft Azure escritas en Python para ser independientes de la plataforma. La lista actual de herramientas se puede encontrar a continuación con una breve descripción de su funcionalidad. ./DeviceCode/devicecodeeasymode.py Genera un código para se...
oauthseeker
OAuthSeeker OAuthSeeker is an red team tool for performing phishing attacks using malicious OAuth applications to compromise user identities within Microsoft Azure and Office365. 🚀 Key Features OAuthSeeker provides the following key features: Azure App OAuth Phishing: Perform OAuth phishing attac...
Vulnerabilities in Microsoft Azure
Microsoft has identified 4 vulnerabilities in various Azure components. A malicious individual could exploit these vulnerabilities to carry out attacks that can lead to various types of damage, as mentioned in the table below. The vulnerability with identifier CVE-2026-69854 has a CVSS score of...
AzureADAssessment
Microsoft Azure AD Assessment Assessor Guide If you are a Microsoft employee or partner performing the assessment for a customer please see the Wiki for the Assessment Guide. Install from the PowerShell Gallery If you run into any errors please see the FAQ section at the end of this document...
CVE-2026-83948
Improper neutralization of special elements used in a command 'command injection' in Microsoft Azure CLI allows an authorized attacker to execute code over a network...
CVE-2026-83948
Improper neutralization of special elements used in a command 'command injection' in Microsoft Azure CLI allows an authorized attacker to execute code over a network...
EUVD-2026-73888
Improper neutralization of special elements used in a command 'command injection' in Microsoft Azure CLI allows an authorized attacker to execute code over a network...
KLA91263 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of...
CVE-2026-83711 Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
...
CVE-2026-70352
Azure AI Language is affected by a missing authentication vulnerability in a critical function, allowing an unauthorized attacker to elevate privileges over a network . The vulnerability is rated CVSS 10.0 (CRITICAL) with low complexity, no privileges required, no user interaction, and changed sc...
CVE-2026-70352 Azure AI Language Elevation of Privilege Vulnerability
...
KLA91257 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability i...
GO-2026-6259 vulnerabilities
Vulnerabilities for packages: velero-plugin-for-aws-fips, velero-plugin-for-gcp, velero-plugin-for-aws, velero-plugin-for-microsoft-azure, velero-plugin-for-gcp-fips, velero-plugin-for-microsoft-azure-fips...
GO-2026-6259 vulnerabilities
Vulnerabilities for packages: velero-plugin-for-aws, velero-plugin-for-microsoft-azure...
CVE-2026-32637 vulnerabilities
Vulnerabilities for packages: velero-plugin-for-aws, velero-plugin-for-microsoft-azure...