AzureHound

AzureHound Il raccoglitore di dati BloodHound per Microsoft Azure Scarica AzureHound Binari delle release Scarica il binario appropriato per la tua piattaforma da una delle nostre Releases. Rolling Release La rolling release contiene binari precompilati che vengono mantenuti automaticamente...

cloudsploit

CloudSploit by Aqua - Cloud Security Scans Quick Start Generic root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker buil...

offensive-azure

Conjunto de ferramentas ofensivas direcionadas ao Microsoft Azure escritas em Python para serem independentes de plataforma. A lista atual de ferramentas pode ser encontrada abaixo com uma breve descrição de suas funcionalidades. ./DeviceCode/devicecodeeasymode.py Gera um código a ser inserido pe...

oauthseeker

OAuthSeeker OAuthSeeker è uno strumento red team per eseguire attacchi di phishing tramite applicazioni OAuth maligne al fine di compromettere le identità degli utenti all'interno di Microsoft Azure e Office365. 🚀 Caratteristiche principali OAuthSeeker fornisce le seguenti caratteristiche...

offensive-azure

Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic. The current list of tools can be found below with a brief description of their functionality. ./DeviceCode/devicecodeeasymode.py Generates a code to be entered by the target user Can be used for...

AzureADAssessment

Microsoft Azure AD Assessment Guida per il valutatore Se sei un dipendente Microsoft o un partner che esegue la valutazione per un cliente, consulta il Wiki per la Guida alla valutazione. Installazione dalla PowerShell Gallery Se riscontri errori, consulta la sezione FAQ alla fine di questo...

CVE-2026-32637 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-aws, velero-plugin-for-microsoft-azure...

GHSA-J2G6-362Q-6QC6 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-aws, velero-plugin-for-microsoft-azure...

CVE-2026-69400 Azure Logic Apps Elevation of Privilege Vulnerability

...

CVE-2026-68782 Azure SQL Database Elevation of Privilege Vulnerability

...

CVE-2026-66309 Azure SQL Database Elevation of Privilege Vulnerability

...

CVE-2026-71331

Integer overflow or wraparound in Windows Device Health Attestation DHA allows an unauthorized attacker to execute code over a network...

EUVD-2026-56771

Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network...

CVE-2026-63522

Azure SQL Database is the affected product for CVE-2026-63522, described as an incorrect permission assignment for a critical resource that allows an authorized attacker to elevate privileges locally. The issue has a base CVSSv3.1 score of 7.8 (HIGH) with LOCAL access, low attack complexity, and ...

EUVD-2026-56746

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network...

Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows Device Health Attestation DHA allows an unauthorized attacker to execute code over a network...

Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Health Attestation DHA allows an unauthorized attacker to execute code over a network...

KLA91203 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of...

CVE-2026-68870

The CVE-2026-68870 entry details a vulnerability in the Azure Key Vault secrets backend of Apache Airflow’s Microsoft Azure provider. In multi-team deployments, if a team-scoped lookup misses, a team-agnostic lookup can resolve a secret id that encodes another team’s namespace, allowing a caller ...

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...