Nir Ohfeld (@Nirohfeld)

Title	Vulnerabilities	Programs	Authors
SAPwned: SAP AI vulnerabilities expose customers’ cloud environments and private AI artifacts	AI Cloud Kubernetes Privilege Escalation Missing Authentication	SAP	Hillai Ben-Sasson (@Hillai) Shir Tamari (@Shirtamari) Nir Ohfeld (@Nirohfeld) Sagi Tzadik (@Sagitz_) Ronen Shustin (@Ronenshh)
The cloud has an isolation problem: PostgreSQL vulnerabilities affect multiple cloud vendors	Privilege Escalation Cross-Tenant Vulnerability OS Command Injection Local Privilege Escalation Cloud	Google Microsoft Aiven	Shir Tamari (@Shirtamari) Nir Ohfeld (@Nirohfeld) Sagi Tzadik (@Sagitz_)
Revisiting OMI: Analysis of CVE-2022-29149, a privilege escalation vulnerability in Azure OMI	Local Privilege Escalation Cloud	Microsoft	Nir Ohfeld (@Nirohfeld) Rotem Lipowitch (@Rotemlipowitch)
Wiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL	Cross-Tenant Vulnerability Privilege Escalation Authentication Bypass Cloud	Microsoft	Shir Tamari (@Shirtamari) Ronen Shustin (@Ronenshh) Nir Ohfeld (@Nirohfeld) Sagi Tzadik (@Sagitz_)
ChaosDB Explained: Azure's Cosmos DB Vulnerability Walkthrough	Cross-Tenant Vulnerability Account Takeover Privilege Escalation	Microsoft	Nir Ohfeld (@Nirohfeld) Sagi Tzadik (@Sagitz_)
OMIGOD: Critical Vulnerabilities in OMI Affecting Countless Azure Customers	Local Privilege Escalation RCE	Microsoft	Nir Ohfeld (@Nirohfeld)
ChaosDB: Critical Vulnerability in Microsoft Azure Cosmos DB	Account Takeover Local Privilege Escalation	Microsoft	Nir Ohfeld (@Nirohfeld) Sagi Tzadik (@Sagitz_)

Page 1 of 1