Privilege Escalation | writeups.xyz

Title	Vulnerabilities	Programs	Authors
How I Got Multiple Privilege Escalations - The Easy Trick?	Privilege Escalation	Undisclosed	Inderjeet Singh (@3nc0d3dGuY)
Azure HDInsight: The Sequel – Unveiling 3 New Vulnerabilities That Could Have Led to Privilege Escalations and Denial of Service	XXE Privilege Escalation ReDoS Security Code Review	Microsoft (Azure HDInsight)	Lidor Ben Shitrit
The UI Slip I Hit 750$: UI Manipulation Leading to Unauthorized Permission Changes	Privilege Escalation Client-Side Enforcement of Server-Side Security	Undisclosed	Sumit Kumar
Azure Devops Zero-Click CI/CD Vulnerability	CI/CD Supply Chain Attack Privilege Escalation Information Disclosure	Microsoft (Azure DevOps Pipelines)	Nadav Noy
Sign up for Brand Collabs Manager on behalf of other page admins – Privilege Escalation	IDOR Privilege Escalation	Meta / Facebook	Sarmad Hassan (@JubaBaghdad)
Response Manipulation Lead To Premium Feature By Normal User Reward of $500	HTTP Response Manipulation Privilege Escalation Payment Bypass	Undisclosed	Abdulrahman Badawi (@Zikolaasec)
Sys:All: How A Simple Loophole in Google Kubernetes Engine Puts Clusters at Risk of Compromise	Kubernetes Cloud Privilege Escalation	Google (GKE)	Roi Nisimi (@Roinisimi) Ofir Yakobi
Roles allowing to abuse Entra ID federation for persistence and privilege escalation	Privilege Escalation	Microsoft (Azure AD)	Clémentin Notin (@Cnotin)
500$ Access Control Bug: Performed Restricted Actions in Developer Settings by low level user.	Broken Access Control Privilege Escalation	ExamNote	Abhi Sharma (@A13h1_)
Technical Advisory – Multiple Vulnerabilities in Nagios XI	RCE Missing Authentication OS Command Injection Local Privilege Escalation Stored XSS Plaintext Storage of a Password Weak Credentials Privilege Escalation Post-Exploitation	Nagios	Oliver Brooks
Multiple Vulnerabilities In Extreme Networks ExtremeXOS	Arbitrary File Read Arbitrary File Write SSRF RCE Privilege Escalation Local Privilege Escalation CSRF Security Code Review	Extreme Networks	David Yesland (@Daveysec)
Owncloud: details about CVE-2023-49103 and CVE-2023-49105	RCE Privilege Escalation Authentication Bypass Information Disclosure Security Code Review	OwnCloud	Charles Fol (@Cfreal_)
$9240 Bounty in 30 days Hunt Challenge	Information Disclosure Reflected XSS Account Takeover CORS Misconfiguration Web Cache Deception Logic Flaw CSV Injection HTML Injection Client-Side Enforcement of Server-Side Security 2FA / MFA Bypass Broken Access Control Privilege Escalation Pre-Account Takeover	Undisclosed	0xrz (@Omidxrz)
A Easy Vertical Privilege Escalation via Session Storage	Privilege Escalation	Undisclosed	Amjad Ali
Privilege Escalation In Ibm Spectrum Virtualize	Privilege Escalation Information Disclosure	IBM	Wolfgang Ettlinger
Chained to hit: Discovering new vectors to gain remote and root access in SAP Enterprise Software	SAP Java RMI RCE JNDI Injection SQL Injection DoS SSRF Missing Authentication HTTP Header Injection Privilege Escalation Information Disclosure Memory Corruption	SAP	Pablo Artuso (@Lmkalg) Yvan Genuer
Cookieless DuoDrop: IIS Auth Bypass & App Pool Privesc in ASP.NET Framework (CVE-2023-36899 & CVE-2023-36560)	Authentication Bypass Privilege Escalation	Undisclosed	Soroush Dalili (@Irsdl)
Privilege Escalation — Playing with the various stages of a session state	Logic Flaw Privilege Escalation	Undisclosed	Ashlyn Lau (@Ashlyn_lau)
Bad.Build: A Critical Privilege Escalation Design Flaw in Google Cloud Build Enables a Supply Chain Attack	Cloud Privilege Escalation	Google	Roi Nisimi (@Roinisimi)
Absuing Amazon VPC CNI Plugin For Kubernetes	Kubernetes Privilege Escalation Cloud	Undisclosed	Beme Carnpbell (@BerneCampbell)
Story of Clickjacking on Microsoft Leads To Privilege Escalation & Account Takeover Of Admin	Clickjacking Privilege Escalation Account Takeover	Microsoft	Abdul Rehman Parkar
Critical Foswiki Vulnerablities: A Logic Error Turned Remote Code Execution	RCE Privilege Escalation Path Traversal	Foswiki	Christian Pöschl
AWS CodeBuild + S3 == Privilege Escalation	Cloud Privilege Escalation	Undisclosed	Paolo Cavaglià (@Paupu_95)
Sometimes What Sounds Benign Can Bite You: An Unexpected Implication of Lambda Privileges	Cloud Privilege Escalation	AWS	Ermetic Team
Patch Diffing CVE-2023-28121 to Compromise a WooCommerce	Authentication Bypass Privilege Escalation	Undisclosed	Julien Ahrens (@MrTuxracer)

Page 2 of 9