Recent Advisories

Severity ID Title Vendor Product Date Type
NONE 752365F5-1CF5-

ethical-hacking-toolkit_752365F5-1CF5-5DED-B177-42613340A869

ethical-hacking-toolkit Ferramentas de segurança ofensiva e defensiva que escrevi enquanto estudava. Nada de wrapper em cima de outras ferramentas ...

N/A N/A GITHUBEXPLOIT
NONE 9D072F8E-44F5-

vulnlab_9D072F8E-44F5-5274-A323-B4D5BADDF295

vulnlab vulnlab is a collection of version-pinned Vagrant virtual machines, each intentionally running software with known vulnerabilities. The goa...

N/A N/A GITHUBEXPLOIT
NONE MS:CVE-2026-47280

Azure Resource Manager Elevation of Privilege Vulnerability_MS:CVE-2026-47280

Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a network.

N/A N/A MSCVE
NONE MS:CVE-2026-26147

Azure Stack HCI Information Disclosure Vulnerability_MS:CVE-2026-26147

Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network.

N/A N/A MSCVE
NONE MS:CVE-2026-35430

Azure Privileged Identity Management (PIM) Elevation of Privilege Vulnerability_MS:CVE-2026-35430

Authorization bypass through user-controlled key in Azure Privileged Identity Management (PIM) allows an authorized attacker to elevate privileges ...

N/A N/A MSCVE
NONE MS:CVE-2026-45659

Microsoft SharePoint Remote Code Execution Vulnerability_MS:CVE-2026-45659

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

N/A N/A MSCVE
NONE MS:CVE-2026-40412

Azure Orbital Spatio Remote Code Execution Vulnerability_MS:CVE-2026-40412

Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code over a network.

N/A N/A MSCVE
NONE MS:CVE-2026-41090

Microsoft Copilot Tampering Vulnerability_MS:CVE-2026-41090

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform...

N/A N/A MSCVE
NONE MS:CVE-2026-42901

Microsoft Entra ID Elevation of Privilege Vulnerability_MS:CVE-2026-42901

Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.

N/A N/A MSCVE
NONE MS:CVE-2026-42827

M365 Copilot Information Disclosure Vulnerability_MS:CVE-2026-42827

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose inf...

N/A N/A MSCVE