all InfoSec news logo
all InfoSec news - Your InfoSec news aggregator
Log in Sign up
All InfoSec / Cybersecurity News

Source: www.cloudvulndb.org / The Open Cloud Vulnerability & Security Issue Database

https://www.cloudvulndb.org
Follow source RSS
Power Platform Custom Code information disclosure 1 month, 3 weeks ago | www.cloudvulndb.org
access access control azure code +16
Bad.Build 2 months, 1 week ago | www.cloudvulndb.org
access account bad bad.build +18
Azure Front Door client-side desync 2 months, 4 weeks ago | www.cloudvulndb.org
attacker azure azure front door cdn +22
nOAuth 3 months ago | www.cloudvulndb.org
accounts app application authentication +15
XSS in Azure Bastion and Container Registry 3 months, 1 week ago | www.cloudvulndb.org
access azure azure container registry bastion +15
Azure App Services takeover via legacy API 3 months, 2 weeks ago | www.cloudvulndb.org
access api app arm +20
AWS Directory Service not checking iam:PassRole on EnableRoleAccess 3 months, 2 weeks ago | www.cloudvulndb.org
action aws check directory +9
Cloud SQL privilege escalation 4 months ago | www.cloudvulndb.org
access cloud cloud sql control +14
API Management SSRF and path traversal vulnerabilities 4 months, 3 weeks ago | www.cloudvulndb.org
api api gateway api management apis +21
MFA enforcement IAM policy bypass 5 months ago | www.cloudvulndb.org
access access keys account aws +13
GhostToken 5 months ago | www.cloudvulndb.org
application applications bug client +18
BrokenSesame 5 months, 1 week ago | www.cloudvulndb.org
access attack bugs cluster +25
Asset Key Thief 5 months, 1 week ago | www.cloudvulndb.org
access account api asset +31
App Runner cross-tenant VPC connectors info leak 5 months, 3 weeks ago | www.cloudvulndb.org
account action api app +12
App Runner cross-tenant observability config info leak 5 months, 3 weeks ago | www.cloudvulndb.org
account action api app +8
RCE vulnerability in Azure Pipelines 5 months, 3 weeks ago | www.cloudvulndb.org
access azure azure pipelines cloud +14
Azure on-premises data gateway cross-tenant access 5 months, 3 weeks ago | www.cloudvulndb.org
access actions agent azure +23
Azure Function Apps privilege escalation 6 months ago | www.cloudvulndb.org
access apis app app containers +18
Partial CloudTrail logging in AWS Control Tower 6 months ago | www.cloudvulndb.org
access access denied adversary api +12
CloudTrail bypass for AWS Service Catalog 6 months, 1 week ago | www.cloudvulndb.org
actions adversaries api aws +12
Super FabriXss 6 months, 1 week ago | www.cloudvulndb.org
application attacker azure azure service +26
Overprivileged CodeBuild default ECR IAM policy 7 months ago | www.cloudvulndb.org
aws build container credentials +11
Azure AD B2C cryptographic flaw allowing account compromise 7 months, 1 week ago | www.cloudvulndb.org
account account compromise active directory azure +20
Azure App Service on Azure Stack Hub privilege escalation 7 months, 1 week ago | www.cloudvulndb.org
access app application app service +19
AWS Console rate limit bypass 7 months, 2 weeks ago | www.cloudvulndb.org
attacks authentication aws brute +15
EmojiDeploy 8 months, 1 week ago | www.cloudvulndb.org
azure bypass control csrf +21
Multiple SSRF vulnerablities in Azure services 8 months, 1 week ago | www.cloudvulndb.org
access adversary api api management +23
AWS CloudTrail bypass for specific IAM actions 8 months, 1 week ago | www.cloudvulndb.org
access access keys actions adversaries +20
SSH key injection in Google Cloud Compute Engine 8 months, 2 weeks ago | www.cloudvulndb.org
abusing browser change cloud +20
ACSESSED 9 months ago | www.cloudvulndb.org
Azure Serverless Functions escape to host 9 months, 1 week ago | www.cloudvulndb.org
azure escape functions host +2
ECR Public vulnerability in undocumented API 9 months, 1 week ago | www.cloudvulndb.org
api public vulnerability
Hell's Keychain 9 months, 3 weeks ago | www.cloudvulndb.org
keychain
AWS AppSync confused deputy via ServiceRoleArn 10 months ago | www.cloudvulndb.org
appsync aws
Azure Devops account takeover via dangling subdomain takeover 10 months, 2 weeks ago | www.cloudvulndb.org
account account takeover azure devops +3
CosMiss 10 months, 3 weeks ago | www.cloudvulndb.org
BlueBleed 11 months, 1 week ago | www.cloudvulndb.org
bluebleed
Azure Arc-enabled Kubernetes privilege escalation 11 months, 2 weeks ago | www.cloudvulndb.org
azure azure arc escalation kubernetes +2
FabriXss 11 months, 2 weeks ago | www.cloudvulndb.org
fabrixss
Azure Cloud Shell access token theft 1 year ago | www.cloudvulndb.org
access access token azure cloud +3
AttachMe 1 year ago | www.cloudvulndb.org
attachme
Synapse Spark LPE 1 year ago | www.cloudvulndb.org
lpe spark synapse
Cloud SQL escape to host 1 year, 1 month ago | www.cloudvulndb.org
cloud escape host sql
Google Cloud Shell command injection 1 year, 1 month ago | www.cloudvulndb.org
access cloud command command injection +16
S3 Replication only logs first destination bucket 1 year, 2 months ago | www.cloudvulndb.org
first logs
Dependency confusion in AWS CodeArtifact 1 year, 2 months ago | www.cloudvulndb.org
aws dependency dependency confusion
Microsoft Azure Site Recovery DLL hijacking 1 year, 2 months ago | www.cloudvulndb.org
azure azure site recovery dll dll hijacking +5
AWS IAM Authenticator for Kubernetes AccessKeyID Validation Bypass 1 year, 2 months ago | www.cloudvulndb.org
authenticator aws bypass iam +2
Azure WAF managed rule set globbing pattern bypass 1 year, 2 months ago | www.cloudvulndb.org
azure bypass managed waf
FabricScape (CVE-2022-30137) - Azure Service Fabric privilege escalation 1 year, 2 months ago | www.cloudvulndb.org
azure azure service cve escalation +5
Azure Open Management Infrastructure (OMI) Elevation of Privilege 1 year, 3 months ago | www.cloudvulndb.org
azure infrastructure management omi +1
Privilege escalation and file poisoning in Synapse Analytics 1 year, 3 months ago | www.cloudvulndb.org
analytics escalation poisoning privilege +2
GKE Authorized Networks bypass via Cloud Functions 1 year, 3 months ago | www.cloudvulndb.org
bypass cloud functions gke +1
MWAA logs leak tokens and hostnames 1 year, 3 months ago | www.cloudvulndb.org
leak logs tokens
ELB Cache mechanism HTTP header smuggling 1 year, 4 months ago | www.cloudvulndb.org
cache header http smuggling
Synlapse 1 year, 4 months ago | www.cloudvulndb.org
synlapse
AWS package backfill attack 1 year, 4 months ago | www.cloudvulndb.org
attack aws package
ExtraReplica 1 year, 4 months ago | www.cloudvulndb.org
AWS SSM agent local privilege escalation 1 year, 5 months ago | www.cloudvulndb.org
agent aws escalation local +3
Log4Shell Hot Patch Vulnerable to Container Escape and Privilege Escalation 1 year, 5 months ago | www.cloudvulndb.org
container container escape escalation escape +5

Nothing found.

Items published with this topic over the last 90 days.

Latest

Power Platform Custom Code information disclosure 1 month, 3 weeks ago | www.cloudvulndb.org
access access control azure code +16
Bad.Build 2 months, 1 week ago | www.cloudvulndb.org
access account bad bad.build +18
Azure Front Door client-side desync 2 months, 4 weeks ago | www.cloudvulndb.org
attacker azure azure front door cdn +22
nOAuth 3 months ago | www.cloudvulndb.org
accounts app application authentication +15
XSS in Azure Bastion and Container Registry 3 months, 1 week ago | www.cloudvulndb.org
access azure azure container registry bastion +15
Azure App Services takeover via legacy API 3 months, 2 weeks ago | www.cloudvulndb.org
access api app arm +20
AWS Directory Service not checking iam:PassRole on EnableRoleAccess 3 months, 2 weeks ago | www.cloudvulndb.org
action aws check directory +9
Cloud SQL privilege escalation 4 months ago | www.cloudvulndb.org
access cloud cloud sql control +14
API Management SSRF and path traversal vulnerabilities 4 months, 3 weeks ago | www.cloudvulndb.org
api api gateway api management apis +21
MFA enforcement IAM policy bypass 5 months ago | www.cloudvulndb.org
access access keys account aws +13
GhostToken 5 months ago | www.cloudvulndb.org
application applications bug client +18
BrokenSesame 5 months, 1 week ago | www.cloudvulndb.org
access attack bugs cluster +25
Asset Key Thief 5 months, 1 week ago | www.cloudvulndb.org
access account api asset +31
App Runner cross-tenant VPC connectors info leak 5 months, 3 weeks ago | www.cloudvulndb.org
account action api app +12
App Runner cross-tenant observability config info leak 5 months, 3 weeks ago | www.cloudvulndb.org
account action api app +8
RCE vulnerability in Azure Pipelines 5 months, 3 weeks ago | www.cloudvulndb.org
access azure azure pipelines cloud +14
Azure on-premises data gateway cross-tenant access 5 months, 3 weeks ago | www.cloudvulndb.org
access actions agent azure +23
Azure Function Apps privilege escalation 6 months ago | www.cloudvulndb.org
access apis app app containers +18
Partial CloudTrail logging in AWS Control Tower 6 months ago | www.cloudvulndb.org
access access denied adversary api +12
CloudTrail bypass for AWS Service Catalog 6 months, 1 week ago | www.cloudvulndb.org
actions adversaries api aws +12
Super FabriXss 6 months, 1 week ago | www.cloudvulndb.org
application attacker azure azure service +26
Overprivileged CodeBuild default ECR IAM policy 7 months ago | www.cloudvulndb.org
aws build container credentials +11
Azure AD B2C cryptographic flaw allowing account compromise 7 months, 1 week ago | www.cloudvulndb.org
account account compromise active directory azure +20
Azure App Service on Azure Stack Hub privilege escalation 7 months, 1 week ago | www.cloudvulndb.org
access app application app service +19
AWS Console rate limit bypass 7 months, 2 weeks ago | www.cloudvulndb.org
attacks authentication aws brute +15
EmojiDeploy 8 months, 1 week ago | www.cloudvulndb.org
azure bypass control csrf +21
Multiple SSRF vulnerablities in Azure services 8 months, 1 week ago | www.cloudvulndb.org
access adversary api api management +23
AWS CloudTrail bypass for specific IAM actions 8 months, 1 week ago | www.cloudvulndb.org
access access keys actions adversaries +20
SSH key injection in Google Cloud Compute Engine 8 months, 2 weeks ago | www.cloudvulndb.org
abusing browser change cloud +20
ACSESSED 9 months ago | www.cloudvulndb.org
Azure Serverless Functions escape to host 9 months, 1 week ago | www.cloudvulndb.org
azure escape functions host +2
ECR Public vulnerability in undocumented API 9 months, 1 week ago | www.cloudvulndb.org
api public vulnerability
Hell's Keychain 9 months, 3 weeks ago | www.cloudvulndb.org
keychain
AWS AppSync confused deputy via ServiceRoleArn 10 months ago | www.cloudvulndb.org
appsync aws
Azure Devops account takeover via dangling subdomain takeover 10 months, 2 weeks ago | www.cloudvulndb.org
account account takeover azure devops +3
CosMiss 10 months, 3 weeks ago | www.cloudvulndb.org
BlueBleed 11 months, 1 week ago | www.cloudvulndb.org
bluebleed
Azure Arc-enabled Kubernetes privilege escalation 11 months, 2 weeks ago | www.cloudvulndb.org
azure azure arc escalation kubernetes +2
FabriXss 11 months, 2 weeks ago | www.cloudvulndb.org
fabrixss
Azure Cloud Shell access token theft 1 year ago | www.cloudvulndb.org
access access token azure cloud +3
AttachMe 1 year ago | www.cloudvulndb.org
attachme
Synapse Spark LPE 1 year ago | www.cloudvulndb.org
lpe spark synapse
Cloud SQL escape to host 1 year, 1 month ago | www.cloudvulndb.org
cloud escape host sql
Google Cloud Shell command injection 1 year, 1 month ago | www.cloudvulndb.org
access cloud command command injection +16
S3 Replication only logs first destination bucket 1 year, 2 months ago | www.cloudvulndb.org
first logs
Dependency confusion in AWS CodeArtifact 1 year, 2 months ago | www.cloudvulndb.org
aws dependency dependency confusion
Microsoft Azure Site Recovery DLL hijacking 1 year, 2 months ago | www.cloudvulndb.org
azure azure site recovery dll dll hijacking +5
AWS IAM Authenticator for Kubernetes AccessKeyID Validation Bypass 1 year, 2 months ago | www.cloudvulndb.org
authenticator aws bypass iam +2
Azure WAF managed rule set globbing pattern bypass 1 year, 2 months ago | www.cloudvulndb.org
azure bypass managed waf
FabricScape (CVE-2022-30137) - Azure Service Fabric privilege escalation 1 year, 2 months ago | www.cloudvulndb.org
azure azure service cve escalation +5
Azure Open Management Infrastructure (OMI) Elevation of Privilege 1 year, 3 months ago | www.cloudvulndb.org
azure infrastructure management omi +1
Privilege escalation and file poisoning in Synapse Analytics 1 year, 3 months ago | www.cloudvulndb.org
analytics escalation poisoning privilege +2
GKE Authorized Networks bypass via Cloud Functions 1 year, 3 months ago | www.cloudvulndb.org
bypass cloud functions gke +1
MWAA logs leak tokens and hostnames 1 year, 3 months ago | www.cloudvulndb.org
leak logs tokens
ELB Cache mechanism HTTP header smuggling 1 year, 4 months ago | www.cloudvulndb.org
cache header http smuggling
Synlapse 1 year, 4 months ago | www.cloudvulndb.org
synlapse
AWS package backfill attack 1 year, 4 months ago | www.cloudvulndb.org
attack aws package
ExtraReplica 1 year, 4 months ago | www.cloudvulndb.org
AWS SSM agent local privilege escalation 1 year, 5 months ago | www.cloudvulndb.org
agent aws escalation local +3
Log4Shell Hot Patch Vulnerable to Container Escape and Privilege Escalation 1 year, 5 months ago | www.cloudvulndb.org
container container escape escalation escape +5

Top (last 7 days)

Nothing found.

Jobs in InfoSec / Cybersecurity

Post a job on infosec-jobs.com Find talent on infosec-jobs.com

Business Information Security Officer

@ Metrolink | Los Angeles, CA
View on infosec-jobs.com

Senior Security Engineer

@ Freedom of the Press Foundation | Remote, 4 hour time zone overlap with New York City
View on infosec-jobs.com

Security Engineer

@ ChartMogul | Remote, EU
View on infosec-jobs.com

Cyber Hunt Subject Matter Expert (SME) - Hybrid

@ XOR Security | Alexandria, VA
View on infosec-jobs.com

Software Compliance, Safety and Security Manager (w/m/d)

@ Bosch Group | Stuttgart, Germany
View on infosec-jobs.com

Chef de projet - Service PKI

@ Alter Solutions | Paris, France
View on infosec-jobs.com
View more jobs