Privilege Escalation | writeups.xyz

Title	Vulnerabilities	Programs	Authors
5 Different Vulnerabilities in Google’s Threadit	DOM XSS Clickjacking Privilege Escalation Information Disclosure	Google	Thomas Orlita (@ThomasOrlita)
Broken Access Control Leads To Change Of Admin Details	Privilege Escalation Client-Side Enforcement of Server-Side Security	Undisclosed	V3D (@V3d_bug)
Full PoC \| Metasploit Pro Trial License Request Limit Bypass	Privilege Escalation Logic Flaw	Rapid7	ChooK
Two account takeover bugs worth $4300 🎁	Account Takeover Privilege Escalation 403 Bypass IDOR	Undisclosed	Usama Varikkottil (@Usama_dev)
How did I earned 6000$ from tokens and scopes in one day	Broken Authorization Privilege Escalation	Undisclosed	Corraldev (@Javier_corralg)
A New Attack Surface on MS Exchange Part 1 - ProxyLogon!	RCE Privilege Escalation	Microsoft	Orange Tsai (@Orange_8361)
How we was able to takeover whole organization via Privilege Escalation	Privilege Escalation Broken Authorization	Undisclosed	Yasser Mohammed (@Boomneroli)
Multiple Vulnerabilities In cPanel/WHM	XXE Stored XSS Privilege Escalation CSRF Cross-Site WebSocket Hijacking (CSWH)	CPanel	Adrian Tiron (@Adrian__t)
Privilege Escalation \| stealing user’s point \| Bugcrowd	IDOR Privilege Escalation	Undisclosed	Abhind Abhi
How I Found Multiple Bugs On FaceBook In 1 Month And a Part For My Methodology & Tools	SSTI SQL Injection Authentication Bypass Privilege Escalation Reflected XSS	Meta / Facebook	Orwa Atyat (@GodfatherOrwa)
From Information Disclosure to interesting Privilege Escalation	Information Disclosure Account Takeover Privilege Escalation	Undisclosed	David Shaul (@Dudy2kk)
Unprivileged User with Read/Write permission to `User Access` can escalate their role to ADMIN — Privilege Escalation	Privilege Escalation	Undisclosed	Ertugrul Ozdemir (@Ertugrulphp)
Part-1 Dive into Zoom Applications	CSRF Payment Bypass Logic Flaw Account Takeover Privilege Escalation	Zoom	Rakesh Thodupunoori (@Rakesh_3895)
Joomla Password Reset Vulnerability And A Stored XSS For Full Compromise	Password Reset Stored XSS Privilege Escalation RCE Security Code Review	Undisclosed	Adrian Tiron (@Adrian__t)
Metadata service MITM allows root privilege escalation (EKS / GKE)	Kubernetes Privilege Escalation MiTM	Google	Etienne Champetier / Champtar
Finding and Exploiting Unintended Functionality in Main Web App APIs	IDOR Information Disclosure Privilege Escalation	Undisclosed	Bend Theory (@Bendtheory)
Mass Assignment exploitation in the wild - Escalating privileges in style	Mass Assignment Privilege Escalation	Undisclosed	Gal Nagli (@Naglinagli)
CVE-2021-27075: Microsoft Azure Vulnerability Allows Privilege Escalation and Leak of Private Data	Privilege Escalation	Microsoft	Intezer
The False Oracle — Azure Functions Padding Oracle Issue	Padding Oracle Attack Privilege Escalation	Microsoft	Polarply (@Polarply)
DMCA.COM Hack, Full Disclosure (With Proof-of-Concept)	Privilege Escalation Client-Side Enforcement of Server-Side Security Stored XSS Broken Access Control	DMCA	Joël Aviad Ossi
How I leveraged XSS to make Privilege Escalation to be Super Admin!	XSS Privilege Escalation	Undisclosed	Asem Eleraky (@Melotover)
Any Account Takeover Through Privilege Escalation	Privilege Escalation Account Takeover	Undisclosed	Shubham Chaskar (@Chaskar_shubham)
I Own your Cloud Shell: Taking over “Azure Cloud Shell” Kubernetes Cluster Through Unsecured Kubelet API 30,000$ Bounty	Privilege Escalation RCE	Microsoft	Chen Cohen (@Chencococococo)
How I Gain Access to the Server Administration of a Million-Dollar Company	Privilege Escalation Mass Assignment	Undisclosed	Marx Chryz Del Mundo
How We Escaped Docker in Azure Functions	Privilege Escalation Cloud	Microsoft	Intezer

Page 7 of 9