Privilege Escalation | writeups.xyz

Title	Vulnerabilities	Programs	Authors
Wiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL	Cross-Tenant Vulnerability Privilege Escalation Authentication Bypass Cloud	Microsoft	Shir Tamari (@Shirtamari) Ronen Shustin (@Ronenshh) Nir Ohfeld (@Nirohfeld) Sagi Tzadik (@Sagitz_)
Azure Monitor – Malicious KQL Query	Privilege Escalation Cloud	Microsoft	Joosua Santasalo (@SantasaloJoosua)
Gaining Unlimited access to graph AuditLogs endpoint using complex filters with non-privileged user account	Information Disclosure Privilege Escalation	Microsoft	Joosua Santasalo (@SantasaloJoosua)
AWS's Log4Shell Hot Patch Vulnerable to Container Escape and Privilege Escalation	Privilege Escalation Container Escape	AWS	Unit 42 (@Unit42_Intel)
Abusing Azure Hybrid Workers for Privilege Escalation – Part 2: An Azure PrivSec Story	Privilege Escalation	Microsoft	Josh Magri (@Passthehashbrwn)
Vulnerable GitHub Actions Workflows Part 1: Privilege Escalation Inside Your CI/CD Pipeline	Privilege Escalation CI/CD	GitHub	Noam Dotan
Abusing Azure Hybrid Workers for Privilege Escalation – Part 1	Privilege Escalation	Microsoft (Azure)	Josh Magri (@Passthehashbrwn)
Escalating from Logic App Contributor to Root Owner in Azure	Privilege Escalation	Microsoft	Josh Magri (@Passthehashbrwn)
Container Escape to Shadow Admin: GKE Autopilot Vulnerabilities	Privilege Escalation Container Escape Kubernetes	Google	Unit 42 (@Unit42_Intel)
How I earned $9000 with Privilege escalations	Privilege Escalation	Undisclosed	Junaid Khan (@JunoonBro)
A misconfigured Apache Airflow to AWS Account Compromise	Outdated Component With a Known Vulnerability Privilege Escalation Information Disclosure	Undisclosed	Avinash Jain (@Logicbomb_1)
Exploiting Redash instances with CVE-2021-41192	Privilege Escalation Session Management Issue SSRF	Undisclosed	Ian Carroll (@Iangcarroll) Tuan Anh Nguyen (@Haxor31337) Gal Nagli (@Naglinagli)
Accessing GoDaddy internal instance through an email logic bug.	Logic Flaw Privilege Escalation Account Takeover	GoDaddy	Mostafa Mamdoh
Hacking into Admin Panel of U.S Federal government system C.A.R.S — without credentials.	Client-Side Enforcement of Server-Side Security Privilege Escalation	U.S. General Services Administration	Hazem Brini (@ImJungsuu)
Privilege Escalation in Microsoft Teams	Privilege Escalation Broken Access Control	Microsoft	Vikas Anil Sharma (@Vikzsharma)
Multiple Vulnerabilities In Concrete CMS – Part2 (PrivEsc/SSRF/etc)	Privilege Escalation SSRF	Concrete CMS	FORTBRIDGE (@FORTBRIDGE1)
URL whitelist bypass in https://cxl-services.appspot.com	Privilege Escalation URL Validation Bypass SSRF	Google	David Schütz (@Xdavidhu)
Privilege Escalation, worth of €300	Broken Access Control IDOR Privilege Escalation	Undisclosed	Hemant Kumar
ChaosDB Explained: Azure's Cosmos DB Vulnerability Walkthrough	Cross-Tenant Vulnerability Account Takeover Privilege Escalation	Microsoft	Nir Ohfeld (@Nirohfeld) Sagi Tzadik (@Sagitz_)
4 Crits in 48 hours: Unicorn Programs	Privilege Escalation Information Disclosure IDOR	Undisclosed	Monke (@Pmofcats)
Bypassing required reviews using GitHub Actions	Privilege Escalation Logic Flaw	GitHub	Omer Gil (@Omer_gil)
Privilege Escalation to stored XSS	Privilege Escalation HTTP Response Manipulation Stored XSS	Undisclosed	Rohit Kumar (Rohit_443)
Bug-Bounty \| FASTMAIL [topicbox.com: Privileges Escalation > Organization Takeover]	Privilege Escalation Logic Flaw	Fastmail	Mohammed ELdawody
Admin access !!	Privilege Escalation Broken Access Control	Undisclosed	Th3.d1p4k (@DipakPanchal05)
Finding Azurescape – Cross-Account Container Takeover in Azure Container Instances	Container Takeover Container Escape Privilege Escalation Cloud	Microsoft	Unit 42 (@Unit42_Intel)

Page 6 of 9