TORQUE-Resource-Manager-2.5.x-2.5.13-stack-based-buffer-overflow-exploit-CVE-2014-8729-CVE-2014-878

TORQUE-Resource-Manager-2.5.x-2.5.13-stack-based-buffer-overflow-exploit-CVE-2014-8729-CVE-2014-878 Exploit Title: TORQUE Resource Manager 2.5.x-2.5.13 stack based buffer overflow Date: 10 Nov 2014 Exploit Author: @inso - Moussajee Thomas, @socks - Laurenceau Gary Vulnerability discovered by:...

cracklord

Cracklord http://jmmcatee.github.io/cracklord/ What Is It? CrackLord is a system designed to provide a scalable, pluggable, and distributed system for both password cracking as well as any other jobs needing lots of computing resources. Better said, CrackLord is a way to load balance the resource...

Linux Distros Unpatched Vulnerability : CVE-2026-93294

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the dat...

grafana: Grafana: Information disclosure via Azure Monitor resource proxy

A flaw was found in Grafana. An authenticated user with query access to an Azure Monitor data source can misuse its resource proxy to send unauthorized requests to Azure Resource Manager Application Programming Interfaces APIs using the data source's configured cloud identity. This unintended...

grafana: Grafana: Information disclosure via Azure Monitor resource proxy

A flaw was found in Grafana. An authenticated user with query access to an Azure Monitor data source can misuse its resource proxy to send unauthorized requests to Azure Resource Manager Application Programming Interfaces APIs using the data source's configured cloud identity. This unintended...

SUSE CVE-2026-93294

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity unintended proxy. The impact is bounded by the Azure role granted to that identity...

CVE-2026-93294

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity unintended proxy. The impact is bounded by the Azure role granted to that identity...

CVE-2026-93294 Azure Monitor data source resource proxy allows calls to arbitrary Azure Resource Manager APIs

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity unintended proxy. The impact is bounded by the Azure role granted to that identity...

EUVD-2026-98903

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity unintended proxy. The impact is bounded by the Azure role granted to that identity...

CVE-2026-93294 Azure Monitor data source resource proxy allows calls to arbitrary Azure Resource Manager APIs

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity unintended proxy. The impact is bounded by the Azure role granted to that identity...

CVE-2026-93294

The Azure Monitor data source contains a vulnerability where a user with query access can leverage its resource proxy as an unintended proxy. This allows the user to call Azure Resource Manager APIs beyond the scope required by Grafana , performing actions using the data source's Azure identity ....

CVE-2026-93294: Unintended Proxy or Intermediary

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity unintended proxy. The impact is bounded by the Azure role granted to that identity...

PT-2026-111742

Name of the Vulnerable Software and Affected Versions Grafana affected versions not specified Description An unintended proxy issue exists where a user with query access to an Azure Monitor data source can utilize its resource proxy to make calls to Azure Resource Manager APIs that exceed the...

Azure Monitor data source resource proxy allows calls to arbitrary Azure Resource Manager APIs

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity unintended proxy. The impact is bounded by the Azure role granted to that identity...

[SECURITY] Fedora 45 Update: pacemaker-3.0.3-2.fc45

Pacemaker is an advanced, scalable High-Availability cluster resource manager. It supports more than 16 node clusters with significant capabilities for managing resources and dependencies. It will run scripts at initialization, when machines go up or down, when related resources fail and can be...

missinglinkai-resource-manager-docker (>=1.0.367, <=2.14.1737), pyne-xmas-elves (>=0.1.0, <=0.7.1) +2 more potentially affected by CVE-2026-77528 via autobahn (17.10.1)

autobahn PYPI version 17.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - missinglinkai-resource-manager-docker =1.0.367, =0.1.0, =0.7.2, =0.7.7, =0.10.1 Source cves: CVE-2026-77528 Source advisory: OSV:PYSEC-2026-40...

missinglinkai-resource-manager-docker (>=1.0.367, <=2.14.1737), pyne-xmas-elves (>=0.1.0, <=0.7.1) +2 more potentially affected by CVE-2026-77528 via autobahn (17.10.1)

autobahn PYPI version 17.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - missinglinkai-resource-manager-docker =1.0.367, =0.1.0, =0.7.2, =0.7.7, =0.10.1 Source cves: CVE-2026-77528 Source advisory:...

CVE-2026-58201

Lokka is a Model Context Protocol server for Microsoft 365, including Microsoft Graph and other services. Prior to 2.1.2, the Lokka-Microsoft tool in src/mcp/src/main.ts uses direct URL string concatenation to append the user-controlled path value to the management.azure.com base URL. A specially...

CVE-2026-58201 Lokka: Azure Resource Manager URL path validation issue

Lokka is a Model Context Protocol server for Microsoft 365, including Microsoft Graph and other services. Prior to 2.1.2, the Lokka-Microsoft tool in src/mcp/src/main.ts uses direct URL string concatenation to append the user-controlled path value to the management.azure.com base URL. A specially...

CVE-2026-58201 Lokka: Azure Resource Manager URL path validation issue

Lokka is a Model Context Protocol server for Microsoft 365, including Microsoft Graph and other services. Prior to 2.1.2, the Lokka-Microsoft tool in src/mcp/src/main.ts uses direct URL string concatenation to append the user-controlled path value to the management.azure.com base URL. A specially...