Container Escape | writeups.xyz

Title	Vulnerabilities	Programs	Authors
From MLOps to MLOops: Exposing the Attack Surface of Machine Learning Platforms	AI RCE XSS Missing Authentication Container Escape Malicious AI Model Malicious Datasets	Jupyter Hugging Face MLflow KServe Seldon	Ori Hollander Shachar Menashe Natan Nehorai Uriya Yavnieli
Leaky Vessels: Docker and runc container breakout vulnerabilities	Container Escape	Docker Opencontainers (Runc)	Rory McNamara (@PsychoMario)
AWS Chain Attack- Thousands of Vulnerable EKS Clusters	AWS Kubernetes EKS Container Escape Security Misconfiguration	Undisclosed	Chen Shiri (@ChenShiri73)
Red team: Journey from RCE to have total control of cloud infrastructure	RCE SSTI Container Escape Kubernetes Components With Known Vulnerabilities CI/CD	Undisclosed	Quang Vo (@Mr_r3bot)
#BrokenSesame: Accidental ‘write’ permissions to private registry allowed potential RCE to Alibaba Cloud Database Services	Cloud RCE Container Escape Kubernetes Privilege Escalation Lateral Movement Supply Chain Attack Cross-Tenant Vulnerability	Alibaba	Ronen Shustin (@Ronenshh) Shir Tamari (@Shirtamari)
Escalating Privileges with Azure Function Apps	Privilege Escalation Cloud Container Escape RCE	Microsoft (Azure)	Karl Fosaaen (@Kfosaaen)
Taking over “Google Cloud Shell” by utilizing capabilities and Kubelet	Container Escape RCE Kubernetes	Undisclosed	Chen Shiri (@ChenShiri73)
Exploiting Distroless Images	Command Injection Arbitrary File Read Arbitrary File Write Container Escape	Google	Daniel Teixeira (@TheRedOperator)
Securing Developer Tools: OneDev Remote Code Execution	RCE SSRF Broken Access Control Container Escape	OneDev	Paul Gerste
Symlinks as mount portals: Abusing container mount points on MikroTik's RouterOS to gain code execution	Container Escape Local Privilege Escalation	MikroTik	Nns
FabricScape: Escaping Service Fabric and Taking Over the Cluster	Container Escape Local Privilege Escalation Cross-Tenant Vulnerability	Microsoft	Unit 42 (@Unit42_Intel)
Cloudflare Pages, part 1: The fellowship of the secret	Command Injection Container Escape Bash Path Injection RCE Local Privilege Escalation Information Disclosure	Cloudflare	Sean Yeoh (@Seanyeoh) James Hebden (@Devec0)
AWS's Log4Shell Hot Patch Vulnerable to Container Escape and Privilege Escalation	Privilege Escalation Container Escape	AWS	Unit 42 (@Unit42_Intel)
Container Escape to Shadow Admin: GKE Autopilot Vulnerabilities	Privilege Escalation Container Escape Kubernetes	Google	Unit 42 (@Unit42_Intel)
CVE-2022-0185 - Winning a $31337 Bounty after Pwning Ubuntu and Escaping Google's KCTF Containers	Container Escape Kubernetes	Google	Crusaders of Rust (@Cor_ctf)
Finding Azurescape – Cross-Account Container Takeover in Azure Container Instances	Container Takeover Container Escape Privilege Escalation Cloud	Microsoft	Unit 42 (@Unit42_Intel)
runc mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs (CVE-2021-30465)	Kubernetes Container Escape	Google	Etienne Champetier / Champtar
GKE Autopilot Node Compromise via Race Condition	Container Escape	Google	Anthony Weems
GKE Autopilot Node Compromise via SSH Metadata	Container Escape	Google	Anthony Weems
GKE Autopilot Node Compromise via startup-script	Container Escape	Google	Anthony Weems
GKE Autopilot Node Compromise via local-storage PersistentVolume	Container Escape	Google	Anthony Weems

Page 1 of 1