Kud I Enter Your Server? New Vulnerabilities in Microsoft Azure
Target Program: Microsoft
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
More Writeups Like This
pentester.land
by Shir Tamari (@shirtamari), Sagi Tzadik (@sagitz_)Wiz Research finds architecture risks that may compromise AI-as-a-Service providers and consequently risk customer data; works with Hugging Face on mitigations
pentester.land
by Ronen Shustin (@ronenshh), Shir Tamari (@shirtamari)#BrokenSesame: Accidental ‘write’ permissions to private registry allowed potential RCE to Alibaba Cloud Database Services
pentester.land
by Karl Fosaaen (@kfosaaen)Escalating Privileges with Azure Function Apps
pentester.land
by Laurence Tennant