Privilege Escalation | writeups.xyz

Title	Vulnerabilities	Programs	Authors
The Danger of Falling to System Role in AWS SDK Client	Cloud Privilege Escalation Security Misconfiguration	Undisclosed	Fracensco Lacerenza (@Lacerenza_fra) Mohamed Ouad (@Ouadmoha)
Code flaws leads to Org/Admin Account Takeover	Privilege Escalation Account Takeover	Undisclosed	Saransh Saraf (@Mr23r0)
Broken Access Control leads to full team takeover and privilege escalation	Broken Access Control Privilege Escalation	Undisclosed	Abdelhameed Ghazy (@El3Etraa1)
Cold Hard Cache — Bypassing RPC Interface Security with Cache Abuse	Privilege Escalation Windows	Microsoft	-
SSD Advisory – pfSense Post Auth RCE	RCE Privilege Escalation	PfSense	이예랑 (@Yelang123x)
Discovering The Less-known Vulnerability In Oracle Peoplesoft	TockenChpoken Privilege Escalation Bruteforce Cookie Manipulation	Undisclosed	RE:HACK (@Rehackxyz)
Privilege Escalation Leads to making authenticated actions (payment processing, creating invoices.. etc)	Privilege Escalation Broken Authorization	Undisclosed	X-Vector (@XVector11)
Google & Apache Found Vulnerable to GitHub Environment Injection	Privilege Escalation CI/CD	Google Apache	Noam Dotan
The cloud has an isolation problem: PostgreSQL vulnerabilities affect multiple cloud vendors	Privilege Escalation Cross-Tenant Vulnerability OS Command Injection Local Privilege Escalation Cloud	Google Microsoft Aiven	Shir Tamari (@Shirtamari) Nir Ohfeld (@Nirohfeld) Sagi Tzadik (@Sagitz_)
Hijacking email with Cloudflare Email Routing	HTTP Response Manipulation Privilege Escalation	Undisclosed	Albert Pedersen (@AlbertSPedersen)
Multiple bugs in one program leads to 1500€	Privilege Escalation IDOR Broken Authorization	Undisclosed	Can1337 (@Canmustdie)
Ability to login as google staff in Google Cloud Community	Privilege Escalation	Google	Gaurav Bhatia
CVE-2022-32223 Discovery: DLL Hijacking via npm CLI	DLL Hijacking Privilege Escalation	Node.js	Yakir Kadkoda
Microsoft Azure Site Recovery DLL Hijacking	DLL Hijacking Privilege Escalation	Microsoft	Jimi Sebree (@DinoBytes)
Exploiting Authentication in AWS IAM Authenticator for Kubernetes	Broken Authentication Privilege Escalation	AWS	Gafnit Amiga (@Gafnitav)
Interesting Privilege Escalation In an Old Private Program	Privilege Escalation	Undisclosed	Zunaid Mahmud (@SZ_Mahmud_7)
We Hacked Larksuite For 1 month and Here is what we found	XSS IDOR Privilege Escalation Broken Access Control CSRF 40x Bypass	Lark Technologies	Snap Sec (@Snap_sec)
Vertical Privilege Escalation: The user can takeover an admin account via response manipulation	Privilege Escalation HTTP Response Manipulation	Undisclosed	Jan Muhammad Zaidi (@Hasanakajan)
Hacking into the worldwide Jacuzzi SmartTub network	SPA Android JWT Privilege Escalation Mass Assignment	Jacuzzi Group SmartTub	Eaton Z. (@XeEaton)
Chaining MFA-Enabled IAM Users with IAM Roles for Potential Privilege Escalation in AWS	Privilege Escalation	AWS	Jason Kao
Privilege Escalation in AKS Clusters	Privilege Escalation	Microsoft	Anneke Breust Aymen Segni (@Aops_solutions) Philipp Belitz
Microsoft Azure Synapse Pwnalytics	Privilege Escalation Cloud	Microsoft	Jimi Sebree (@DinoBytes)
I Obtained ADMIN access via the Account Activation link [In 30 seconds]	Privilege Escalation Amazon Cognito Misconfiguration	Undisclosed	Popalltheshells
Kubernetes Privilege Escalation: Excessive Permissions in Popular Platforms	Privilege Escalation Broken Access Control Kubernetes	Google AWS Microsoft Red Hat	Yuval Avrahami (@Yuval_avrahami) Shaul Ben Hai
Vulnerable GitHub Actions Workflows Part 2: Actions That Open the Door to CI/CD Pipeline Attacks	Privilege Escalation CI/CD	Undisclosed	Noam Dotan

Page 5 of 9