all InfoSec news logo
all InfoSec news - Your InfoSec news aggregator
Log in Sign up
All InfoSec / Cybersecurity News

Source: www.cloudvulndb.org / The Open Cloud Vulnerability & Security Issue Database

https://www.cloudvulndb.org
Follow source RSS
Lethal Injection 1 week, 4 days ago | www.cloudvulndb.org
access amp attackers auth +24
GraphNinja 2 weeks, 5 days ago | www.cloudvulndb.org
attackers attacks authentication credentials +14
AWS Amplify IAM role publicly assumable exposure 1 month ago | www.cloudvulndb.org
account amplify aws cli +12
AWS Glue database password leakage 1 month, 1 week ago | www.cloudvulndb.org
access aws aws glue can +11
FlowFixation 1 month, 3 weeks ago | www.cloudvulndb.org
airflow amazon apache attack +25
Synapse Analytics privilege escalation via intelligent caching 2 months, 1 week ago | www.cloudvulndb.org
analytics caching context environment +16
Azure Site Recovery privilege escalation 3 months ago | www.cloudvulndb.org
access access token account asr +19
Azure HDInsight privilege escalation and DoS vulnerabilities 3 months, 1 week ago | www.cloudvulndb.org
apache attacker azure dos +9
Azure Pipelines Agent poisoned pipeline execution 4 months, 4 weeks ago | www.cloudvulndb.org
actions agent azure azure pipelines +14
ApatchMe 6 months, 2 weeks ago | www.cloudvulndb.org
actor airflow amazon apache +19
Vertex AI Studio data exfiltration 6 months, 4 weeks ago | www.cloudvulndb.org
adversary attack chat context +19
Azure AI Playground data exfiltration 6 months, 4 weeks ago | www.cloudvulndb.org
adversary attack azure azure ai +18
Amazon WorkSpaces Windows client credential logging 7 months, 1 week ago | www.cloudvulndb.org
access amazon attacker aws +15
Chronicle cross-customer bucket access 7 months, 4 weeks ago | www.cloudvulndb.org
access account can chronicle +13
Power Platform Custom Code information disclosure 9 months, 2 weeks ago | www.cloudvulndb.org
access access control azure code +16
Bad.Build 10 months ago | www.cloudvulndb.org
access account bad bad.build +18
Azure Front Door client-side desync 10 months, 3 weeks ago | www.cloudvulndb.org
attacker azure azure front door cdn +22
nOAuth 10 months, 4 weeks ago | www.cloudvulndb.org
accounts app application authentication +15
XSS in Azure Bastion and Container Registry 11 months ago | www.cloudvulndb.org
access azure azure container registry bastion +15
Azure App Services takeover via legacy API 11 months ago | www.cloudvulndb.org
access api app arm +20
AWS Directory Service not checking iam:PassRole on EnableRoleAccess 11 months, 1 week ago | www.cloudvulndb.org
action aws check directory +9
Privilege escalation in GCP Cloud SQL 11 months, 2 weeks ago | www.cloudvulndb.org
access accounts attacker cloud +19
Cloud SQL privilege escalation 11 months, 3 weeks ago | www.cloudvulndb.org
access cloud cloud sql control +14
API Management SSRF and path traversal vulnerabilities 1 year ago | www.cloudvulndb.org
api api gateway api management apis +21
MFA enforcement IAM policy bypass 1 year ago | www.cloudvulndb.org
access access keys account aws +13
GhostToken 1 year ago | www.cloudvulndb.org
application applications bug client +18
BrokenSesame 1 year ago | www.cloudvulndb.org
access attack bugs cluster +25
Asset Key Thief 1 year ago | www.cloudvulndb.org
access account api asset +31
App Runner cross-tenant VPC connectors info leak 1 year, 1 month ago | www.cloudvulndb.org
account action api app +12
App Runner cross-tenant observability config info leak 1 year, 1 month ago | www.cloudvulndb.org
account action api app +8
RCE vulnerability in Azure Pipelines 1 year, 1 month ago | www.cloudvulndb.org
access azure azure pipelines cloud +14
Azure on-premises data gateway cross-tenant access 1 year, 1 month ago | www.cloudvulndb.org
access actions agent azure +23
Azure Function Apps privilege escalation 1 year, 1 month ago | www.cloudvulndb.org
access apis app app containers +18
Partial CloudTrail logging in AWS Control Tower 1 year, 1 month ago | www.cloudvulndb.org
access access denied adversary api +12
CloudTrail bypass for AWS Service Catalog 1 year, 1 month ago | www.cloudvulndb.org
actions adversaries api aws +12
Super FabriXss 1 year, 2 months ago | www.cloudvulndb.org
application attacker azure azure service +26
Overprivileged CodeBuild default ECR IAM policy 1 year, 2 months ago | www.cloudvulndb.org
aws build container credentials +11
Azure AD B2C cryptographic flaw allowing account compromise 1 year, 3 months ago | www.cloudvulndb.org
account account compromise active directory azure +20
Azure App Service on Azure Stack Hub privilege escalation 1 year, 3 months ago | www.cloudvulndb.org
access app application app service +19
AWS Console rate limit bypass 1 year, 3 months ago | www.cloudvulndb.org
attacks authentication aws brute +15
EmojiDeploy 1 year, 3 months ago | www.cloudvulndb.org
azure bypass control csrf +21
AWS CloudTrail bypass for specific IAM actions 1 year, 4 months ago | www.cloudvulndb.org
access access keys actions adversaries +20
Multiple SSRF vulnerablities in Azure services 1 year, 4 months ago | www.cloudvulndb.org
access adversary api api management +23
SSH key injection in Google Cloud Compute Engine 1 year, 4 months ago | www.cloudvulndb.org
abusing browser change cloud +20
ACSESSED 1 year, 4 months ago | www.cloudvulndb.org
Azure Serverless Functions escape to host 1 year, 5 months ago | www.cloudvulndb.org
azure escape functions host +2
ECR Public vulnerability in undocumented API 1 year, 5 months ago | www.cloudvulndb.org
api public vulnerability
Hell's Keychain 1 year, 5 months ago | www.cloudvulndb.org
keychain
AWS AppSync confused deputy via ServiceRoleArn 1 year, 5 months ago | www.cloudvulndb.org
appsync aws
Azure Devops account takeover via dangling subdomain takeover 1 year, 6 months ago | www.cloudvulndb.org
account account takeover azure devops +3
CosMiss 1 year, 6 months ago | www.cloudvulndb.org
Azure CLI code injection vulnerability 1 year, 6 months ago | www.cloudvulndb.org
azure cli code code execution +13
BlueBleed 1 year, 6 months ago | www.cloudvulndb.org
bluebleed
FabriXss 1 year, 7 months ago | www.cloudvulndb.org
fabrixss
Azure Arc-enabled Kubernetes privilege escalation 1 year, 7 months ago | www.cloudvulndb.org
azure azure arc escalation kubernetes +2
AttachMe 1 year, 7 months ago | www.cloudvulndb.org
attachme
Azure Cloud Shell access token theft 1 year, 7 months ago | www.cloudvulndb.org
access access token azure cloud +3
Synapse Spark LPE 1 year, 8 months ago | www.cloudvulndb.org
lpe spark synapse
SNS SigningCertUrl improper validation 1 year, 8 months ago | www.cloudvulndb.org
amazon amazon sns attacker aws +11
Cloud SQL escape to host 1 year, 9 months ago | www.cloudvulndb.org
cloud escape host sql

Nothing found.

Items published with this topic over the last 90 days.

Latest

Lethal Injection 1 week, 4 days ago | www.cloudvulndb.org
access amp attackers auth +24
GraphNinja 2 weeks, 5 days ago | www.cloudvulndb.org
attackers attacks authentication credentials +14
AWS Amplify IAM role publicly assumable exposure 1 month ago | www.cloudvulndb.org
account amplify aws cli +12
AWS Glue database password leakage 1 month, 1 week ago | www.cloudvulndb.org
access aws aws glue can +11
FlowFixation 1 month, 3 weeks ago | www.cloudvulndb.org
airflow amazon apache attack +25
Synapse Analytics privilege escalation via intelligent caching 2 months, 1 week ago | www.cloudvulndb.org
analytics caching context environment +16
Azure Site Recovery privilege escalation 3 months ago | www.cloudvulndb.org
access access token account asr +19
Azure HDInsight privilege escalation and DoS vulnerabilities 3 months, 1 week ago | www.cloudvulndb.org
apache attacker azure dos +9
Azure Pipelines Agent poisoned pipeline execution 4 months, 4 weeks ago | www.cloudvulndb.org
actions agent azure azure pipelines +14
ApatchMe 6 months, 2 weeks ago | www.cloudvulndb.org
actor airflow amazon apache +19
Vertex AI Studio data exfiltration 6 months, 4 weeks ago | www.cloudvulndb.org
adversary attack chat context +19
Azure AI Playground data exfiltration 6 months, 4 weeks ago | www.cloudvulndb.org
adversary attack azure azure ai +18
Amazon WorkSpaces Windows client credential logging 7 months, 1 week ago | www.cloudvulndb.org
access amazon attacker aws +15
Chronicle cross-customer bucket access 7 months, 4 weeks ago | www.cloudvulndb.org
access account can chronicle +13
Power Platform Custom Code information disclosure 9 months, 2 weeks ago | www.cloudvulndb.org
access access control azure code +16
Bad.Build 10 months ago | www.cloudvulndb.org
access account bad bad.build +18
Azure Front Door client-side desync 10 months, 3 weeks ago | www.cloudvulndb.org
attacker azure azure front door cdn +22
nOAuth 10 months, 4 weeks ago | www.cloudvulndb.org
accounts app application authentication +15
XSS in Azure Bastion and Container Registry 11 months ago | www.cloudvulndb.org
access azure azure container registry bastion +15
Azure App Services takeover via legacy API 11 months ago | www.cloudvulndb.org
access api app arm +20
AWS Directory Service not checking iam:PassRole on EnableRoleAccess 11 months, 1 week ago | www.cloudvulndb.org
action aws check directory +9
Privilege escalation in GCP Cloud SQL 11 months, 2 weeks ago | www.cloudvulndb.org
access accounts attacker cloud +19
Cloud SQL privilege escalation 11 months, 3 weeks ago | www.cloudvulndb.org
access cloud cloud sql control +14
API Management SSRF and path traversal vulnerabilities 1 year ago | www.cloudvulndb.org
api api gateway api management apis +21
MFA enforcement IAM policy bypass 1 year ago | www.cloudvulndb.org
access access keys account aws +13
GhostToken 1 year ago | www.cloudvulndb.org
application applications bug client +18
BrokenSesame 1 year ago | www.cloudvulndb.org
access attack bugs cluster +25
Asset Key Thief 1 year ago | www.cloudvulndb.org
access account api asset +31
App Runner cross-tenant VPC connectors info leak 1 year, 1 month ago | www.cloudvulndb.org
account action api app +12
App Runner cross-tenant observability config info leak 1 year, 1 month ago | www.cloudvulndb.org
account action api app +8
RCE vulnerability in Azure Pipelines 1 year, 1 month ago | www.cloudvulndb.org
access azure azure pipelines cloud +14
Azure on-premises data gateway cross-tenant access 1 year, 1 month ago | www.cloudvulndb.org
access actions agent azure +23
Azure Function Apps privilege escalation 1 year, 1 month ago | www.cloudvulndb.org
access apis app app containers +18
Partial CloudTrail logging in AWS Control Tower 1 year, 1 month ago | www.cloudvulndb.org
access access denied adversary api +12
CloudTrail bypass for AWS Service Catalog 1 year, 1 month ago | www.cloudvulndb.org
actions adversaries api aws +12
Super FabriXss 1 year, 2 months ago | www.cloudvulndb.org
application attacker azure azure service +26
Overprivileged CodeBuild default ECR IAM policy 1 year, 2 months ago | www.cloudvulndb.org
aws build container credentials +11
Azure AD B2C cryptographic flaw allowing account compromise 1 year, 3 months ago | www.cloudvulndb.org
account account compromise active directory azure +20
Azure App Service on Azure Stack Hub privilege escalation 1 year, 3 months ago | www.cloudvulndb.org
access app application app service +19
AWS Console rate limit bypass 1 year, 3 months ago | www.cloudvulndb.org
attacks authentication aws brute +15
EmojiDeploy 1 year, 3 months ago | www.cloudvulndb.org
azure bypass control csrf +21
AWS CloudTrail bypass for specific IAM actions 1 year, 4 months ago | www.cloudvulndb.org
access access keys actions adversaries +20
Multiple SSRF vulnerablities in Azure services 1 year, 4 months ago | www.cloudvulndb.org
access adversary api api management +23
SSH key injection in Google Cloud Compute Engine 1 year, 4 months ago | www.cloudvulndb.org
abusing browser change cloud +20
ACSESSED 1 year, 4 months ago | www.cloudvulndb.org
Azure Serverless Functions escape to host 1 year, 5 months ago | www.cloudvulndb.org
azure escape functions host +2
ECR Public vulnerability in undocumented API 1 year, 5 months ago | www.cloudvulndb.org
api public vulnerability
Hell's Keychain 1 year, 5 months ago | www.cloudvulndb.org
keychain
AWS AppSync confused deputy via ServiceRoleArn 1 year, 5 months ago | www.cloudvulndb.org
appsync aws
Azure Devops account takeover via dangling subdomain takeover 1 year, 6 months ago | www.cloudvulndb.org
account account takeover azure devops +3
CosMiss 1 year, 6 months ago | www.cloudvulndb.org
Azure CLI code injection vulnerability 1 year, 6 months ago | www.cloudvulndb.org
azure cli code code execution +13
BlueBleed 1 year, 6 months ago | www.cloudvulndb.org
bluebleed
FabriXss 1 year, 7 months ago | www.cloudvulndb.org
fabrixss
Azure Arc-enabled Kubernetes privilege escalation 1 year, 7 months ago | www.cloudvulndb.org
azure azure arc escalation kubernetes +2
AttachMe 1 year, 7 months ago | www.cloudvulndb.org
attachme
Azure Cloud Shell access token theft 1 year, 7 months ago | www.cloudvulndb.org
access access token azure cloud +3
Synapse Spark LPE 1 year, 8 months ago | www.cloudvulndb.org
lpe spark synapse
SNS SigningCertUrl improper validation 1 year, 8 months ago | www.cloudvulndb.org
amazon amazon sns attacker aws +11
Cloud SQL escape to host 1 year, 9 months ago | www.cloudvulndb.org
cloud escape host sql

Top (last 7 days)

Nothing found.

Jobs in InfoSec / Cybersecurity

Post a Job Search Talent

Information Security Engineers

@ D. E. Shaw Research | New York City
View on infosec-jobs.com

Technology Security Analyst

@ Halton Region | Oakville, Ontario, Canada
View on infosec-jobs.com

Senior Cyber Security Analyst

@ Valley Water | San Jose, CA
View on infosec-jobs.com

Associate Engineer (Security Operations Centre)

@ People Profilers | Singapore, Singapore, Singapore
View on infosec-jobs.com

DevSecOps Engineer

@ Australian Payments Plus | Sydney, New South Wales, Australia
View on infosec-jobs.com

Senior Cybersecurity Specialist

@ SmartRecruiters Inc | Poland, Poland
View on infosec-jobs.com