Privilege Escalation | writeups.xyz

Title	Vulnerabilities	Programs	Authors
Improper Privilege Management in Grails Spring Security Core <= 5.1.0 (CVE-2022-41923)	Privilege Escalation Authorization Bypass	Grails	Benjamin Sepe (@Butanal_C4H8O) Adrien Peter (@Taryax)
Exploiting CVE-2023-23397: Microsoft Outlook Elevation of Privilege Vulnerability	Privilege Escalation NTLM	Microsoft (Outlook)	Dominic Chell (@Domchell)
LogicalDOC Vulnerability Disclosure	XXE RCE Command Injection Privilege Escalation	LogicalDOC	Brett DeWall (@Xbadbiddyx) Michael Rand
CVE-2023–0759 / Privilege Escalation in the Cockpit CMS	Privilege Escalation	Cockpit CMS	Cupc4k3
Azure security — Internal recon leveraging lack of access control	Azure AD Cloud Security Misconfiguration Privilege Escalation	Microsoft (Azure)	Molx32
Host Header Injection to Complete Organization takeover	SSRF Host Header Injection Privilege Escalation	Undisclosed	Muhammad Umer Adeem
WEEKEND DESTROYER - RCE in Western Digital PR4100 NAS	RCE Hardcoded Credentials Privilege Escalation	Western Digital	Pedro Ribeiro (@Pedrib1337) Radek Domanski (@RabbitPro)
API Misconfiguration - No Swag of SwaggerUI	Security Misconfiguration Privilege Escalation	Undisclosed	Jerry Shah (@Jerry)
ACSESSED: Cross-tenant network bypass in Azure Cognitive Search	Cloud Cross-Tenant Vulnerability Privilege Escalation	Microsoft (Azure)	Emilien Socchi (@Emiliensocchi)
Passwordless Persistence and Privilege Escalation in Azure	Privilege Escalation Cloud Azure AD	Microsoft	Andy Robbins (@_Wald0)
Privilege escalation leads to deleting other user’s account and company Workspace [Access Control]	Privilege Escalation Broken Access Control	Undisclosed	Pratik Gaikwad
AWS ECR Public Vulnerability	Cloud Privilege Escalation Broken Access Control	AWS	Gafnit Amiga (@Gafnitav)
Privilege Escalation to remove the owner from the organization	Privilege Escalation Mass Assignment	Undisclosed	Hemant Kumar
From Zero to Hero Part 2: From SQL Injection to RCE on Intel DCM (CVE-2022-21225)	SQL Injection Kerberos RCE Privilege Escalation Security Code Review	Intel	Julien Ahrens (@MrTuxracer)
Hell’s Keychain: Supply-chain vulnerability in IBM Cloud Databases for PostgreSQL allows potential for unauthorized database access	Cloud SQL Injection Privilege Escalation Information Disclosure	IBM	Ronen Shustin (@Ronenshh) Shir Tamari (@Shirtamari)
Broken access control + misconfiguration = Beautiful privilege escalation	Broken Access Control Privilege Escalation	Undisclosed	Hossam Mesbah (@M359ah)
From Zero to Hero Part 1: Bypassing Intel DCM’s Authentication by Spoofing Kerberos and LDAP Responses (CVE-2022-33942)	Authentication Bypass Kerberos RCE Privilege Escalation Security Code Review	Intel	Julien Ahrens (@MrTuxracer)
A Confused Deputy Vulnerability in AWS AppSync	Confused Deputy Cloud Privilege Escalation	AWS	Nick Frichette (@Frichette_n)
MEGA’s Unlimited Cloud Storage Vulnerability	Logic Flaw Privilege Escalation	MEGA	Nirmal Dahal (@TheNittam)
SSD Advisory – Cisco Secure Manager Appliance jwt_api_impl Hardcoded JWT Secret Elevation of Privilege	Hardcoded Credentials Security Code Review JWT Privilege Escalation	Cisco	-
Invitation Hijacking	Broken Authorization Privilege Escalation	Undisclosed	VFlexo (@Vflexo)
Atlassian Jira Align, Version 10.107.4 Advisory	SSRF Broken Access Control Privilege Escalation	Atlassian	Jacob Shafer (@Fibbot)
Finding Multiple Security Issues on Agorapulse	Log4shell RCE Information Disclosure Broken Access Control Privilege Escalation	Agorapulse	Snap Sec (@Snap_sec)
Sail away, sail away, sail away	RCE Privilege Escalation	Undisclosed	Reino Mostert
A New Attack Surface on MS Exchange Part 4 - ProxyRelay!	RCE Privilege Escalation	Microsoft	Orange Tsai (@Orange_8361)

Page 4 of 9