Broken Authorization | writeups.xyz

Title	Vulnerabilities	Programs	Authors
How 1 Exposed Honeywell API Gave us Control Over an Internal Engineering System	Missing Authentication Information Disclosure Broken Authorization Account Takeover	Honeywell	Eaton Z. (@XeEaton)
Capturing Exposed AWS Keys During Dynamic Web Application Tests	Cloud Broken Authorization	Undisclosed	Aleksa Zatezalo (@ZatezaloAleksa)
Traeger Grill D2 Wi-Fi Controller, Version 2.02.04	IoT Broken Authorization Information Disclosure	Traeger	Nick Cerne
Securing our home labs: Frigate code review	OAuth Broken Authorization Broken Authentication SSRF CI/CD Supply Chain Attack Security Code Review	Frigate	Logan MacLaren Jorge Rosillo (@Jorge_ctf)
Writing Burp Bambda Filters Like a Boss	JWT Broken Authorization	Undisclosed	Dana Epp (@DanaEpp)
38TB of data accidentally exposed by Microsoft AI researchers	Cloud Broken Authorization	Microsoft	Hillai Ben-Sasson (@Hillai) Ronny Greenberg
Apache Superset Part II: RCE, Credential Harvesting and More	RCE Insecure Deserialization URL Validation Bypass Broken Authorization Arbitrary File Read Insufficiently Protected Credentials Default Flask Secret Key Hardcoded Credentials	Apache Superset	Naveen Sunkavally
A $1,000,000 bounty? The KuCoin User Information Leak	Information Disclosure Zendesk Broken Authorization Security Misconfiguration	Undisclosed	Corben Leo (@Hacker_)
How Material Security Uncovered a Vulnerability in the Gmail API	Broken Access Control Broken Authorization	Google	Chris Long (@Centurion)
The Time I Hacked Google’s Manual Actions Database	Broken Access Control Broken Authorization	Google	Tom Anthony (@TomAnthonySEO)
Exposing Users Table From a Leaky GraphQL Query	GraphQL Broken Authorization Broken Access Control	Undisclosed	Inderjeet Singh - Encodedguy (@3nc0d3dGuY)
Exploiting Parameter Pollution in Golang Web Apps	Broken Authorization HTTP Parameter Pollution	Concourse VMware	Rick Ramgattie (@RRamgattie)
Meta Quest: Attacker could make any Oculus user to follow (subscribe) him without any approval	IDOR Broken Authorization	Meta / Facebook	Dzmitry Lukyanenka (@Vulnano)
Better Make Sure Your Password Manager Is Secure	Hardcoded Credentials XSS Cryptographic Issues Broken Authorization Authentication Bypass	Click Studios	Kuekerino (@Kuekerino) Ubahnverleih (@Ubahnverleih) Parzel (@Parzel2)
Pre-Auth RCE with CodeQL in Under 20 Minutes	Security Code Review RCE Command Injection Broken Authorization	PgAdmin	Florian Hauser (@Frycos)
Invitation Hijacking	Broken Authorization Privilege Escalation	Undisclosed	VFlexo (@Vflexo)
Support supports a Hacker	Social Engineering Spoofing Broken Authorization Account Takeover	Undisclosed	Mechboy (@Mechboy_)
Reverse Engineering the Apple Multipeer Connectivity Framework	Broken Authorization Reverse Engineering Networking	Apple	Simone Margaritelli (@Evilsocket)
Vulnerabilities in Tenda's W15Ev2 AC1200 Router	OS Command Injection Buffer Overflow Memory Corruption Stored XSS Broken Authorization Information Disclosure	Tenda	Olivier Laflamme (@Olivier_boschko)
Insecure Comments	IDOR Broken Authorization	Microsoft	Meareg
AttachMe: critical OCI vulnerability allows unauthorized access to customer cloud storage volumes	Cloud Cross-Tenant Vulnerability Broken Authorization	Oracle	Elad Gabay (@Eladgabay_)
Privilege Escalation Leads to making authenticated actions (payment processing, creating invoices.. etc)	Privilege Escalation Broken Authorization	Undisclosed	X-Vector (@XVector11)
Cloning internal Google repos for fun and… info?	Broken Authorization	Google	Luke Berner
Attackers Can Bypass GitHub Required Reviewers to Submit Malicious Code	Broken Authorization Logic Flaw	GitHub	Noam Dotan
Exploiting Improper Validation of Amazon Simple Notification Service SigningCertUrl	Broken Authorization Signature Validation Bypass	Amazon	Eugene Lim (@Spaceraccoonsec)

Page 1 of 11