AzureHound

AzureHound The BloodHound data collector for Microsoft Azure Get AzureHound Release Binaries Download the appropriate binary for your platform from one of our Releases. Rolling Release The rolling release contains pre-built binaries that are automatically kept up-to-date with the main branch and...

Missing Authorization

Overview zenml is a ZenML: Write production-ready ML code. Affected versions of this package are vulnerable to Missing Authorization in the getdeployedstack endpoint. An attacker can access sensitive information, including infrastructure topology, service connector details, stack ownership, and...

CVE-2026-11876

In zenml-io/zenml version 0.94.2, the GET /api/v1/stack-deployment/stack endpoint getdeployedstack lacks proper RBAC authorization checks, allowing any authenticated user to enumerate all deployed stacks across all users and tenants. This includes stack component details, service connector...

CVE-2026-56336

Capgo before 12.128.2 contains an information-disclosure vulnerability in the unauthenticated /private/sso/check-domain endpoint that returns internal org_id and provider_id values. Attackers can enumerate email domains to map domains to organization UUIDs and SSO provider identifiers, enabling r...

PT-2026-57556

Name of the Vulnerable Software and Affected Versions Capgo versions prior to 12.128.2 Description An information disclosure issue exists in the unauthenticated '/private/sso/check-domain' endpoint. The endpoint returns internal org id and provider id values, allowing attackers to enumerate email...