地图 / 权限提升

权限提升

Privilege Escalation · 访问控制

访问控制 / 权限提升

455公开报告

—CWE 编号

0已标注发现方式

455关联报告

发现方式分布

暂无发现方式标注。

关联报告

Email Confirmation Bypass in your-store.myshopify.com which leads to privilege escalationShopify · 2020-09-15 · 高危 · 559 票 Shopify Stocky App OAuth MisconfigurationShopify · 2019-12-11 · 低危 · 527 票 Able to Become Admin for Any LINE Official AccountLY Corporation · 2020-03-25 · 高危 · 493 票 Project Template functionality can be used to copy private project data, such as repository, confidential issues, snippets, and merge requestsGitLab · 2019-11-27 · 高危 · $12,000 · 457 票 Read-only application can publish/delete fleetsX / xAI · 2021-01-04 · 低危 · 398 票 Subdomain takeover of datacafe-cert.starbucks.comStarbucks · 2019-08-28 · 中危 · 311 票 bd-j exploit chainPlayStation · 2022-06-10 · 中危 · $20,000 · 298 票 Team member with Program permission only can escalate to Admin permissionHackerOne · 2019-06-26 · 低危 · 268 票 Privilege escalation from any user (including external) to gitlab admin when admin impersonates youGitLab · 2020-08-26 · 高危 · 256 票 access list owner can escalate his role to the highest rolesTeleport · — · 未评级 · $21,000 · 255 票 Linux privilege escalation via trusted $PATH in keybase-redirectorKeybase · — · 未评级 · $5,000 · 245 票 Privilege escalation in workers containerSemmle · 2019-09-25 · 中危 · $1,500 · 206 票 Worker container escape lead to arbitrary file reading in host machine [again]Semmle · 2019-10-21 · 高危 · $2,000 · 178 票 Ability To Takeover any account by Emaill.Radancy · — · 未评级 · 168 票 Subdomain takeover of storybook.lystit.comLyst · 2020-01-22 · 中危 · $1,000 · 163 票 Takeover of hackerone.engineering via GithubHackerOne · 2023-07-31 · 低危 · 135 票 Subdomain takeover at info.hacker.oneHackerOne · 2017-03-27 · 低危 · 134 票 A non-administrator user can change his email even when it is restricted by an administratorVisma Public · — · 未评级 · $250 · 124 票 Subdomain takeover of d02-1-ag.productioncontroller.starbucks.comStarbucks · 2019-08-15 · 中危 · 122 票 Apache HTTP [2.4.17-2.4.38] Local Root Privilege EscalationInternet Bug Bounty · 2019-09-11 · 中危 · $1,500 · 121 票 Disclose Any Store products, Files, Purchase Orders Via Email through Shopify Stocky APPShopify · 2020-02-02 · 未评级 · 116 票 Privilege Escalation via Keybase HelperKeybase · — · 未评级 · 115 票 Worker container escape lead to arbitrary file reading in host machineSemmle · 2019-10-16 · 高危 · $2,000 · 112 票 Subdomain takeover on svcgatewayus.starbucks.comStarbucks · 2018-06-25 · 高危 · 109 票 Subdomain takeover on usclsapipma.cv.ford.comFord · 2019-03-24 · 中危 · 105 票 Subdomain takeover on happymondays.starbucks.com due to non-used AWS S3 DNS recordStarbucks · 2016-12-19 · 中危 · 105 票 Ubuntu Linux privilege escalation (dirty_sock)Internet Bug Bounty · 2019-08-28 · 中危 · 103 票 Chain Vulnerability lead to Full Control Group Live Accounts & Undeletable CreatorTikTok · 2025-07-08 · 低危 · 98 票 Privilege Escalation via REST API to Administrator leads to RCEWordPress · 2021-05-17 · 中危 · 92 票 Bypass report submit restriction/ban using the API keyHackerOne · 2023-10-29 · 低危 · 91 票 Subdomain takeover on wfmnarptpc.starbucks.comStarbucks · 2018-08-09 · 中危 · 91 票 Subdomain Takeover at creatorforum.roblox.comRoblox · 2020-03-24 · 中危 · 90 票 Chained Broken Access Control in TikTok Live Backstage Enables Full Control of Public Leaderboard ActivitiesTikTok · 2025-09-11 · 低危 · 89 票 PS4 BD-J privilege escalation using nested JARPlayStation · 2026-04-29 · 低危 · $2,500 · 86 票 Attacker is able to join any tenant on larksuite and view personal files/chats.Lark Technologies · 2021-11-03 · 高危 · 84 票 Full Account Takeover on *.unibet.com due to crossdomain.xml and AkamaiPlayer loaderContextKindred Group · — · 未评级 · 83 票 Multiple Subdomain takeovers via unclaimed instancesStarbucks · 2017-12-04 · 中危 · 83 票 Unauthorized access to PII leads to Administrator account TakeoverMTN Group · 2025-02-22 · 高危 · 82 票 Privilege-0 to Root Privilege Escalation on EdgeSwitchUbiquiti Inc. · 2019-03-31 · 中危 · 82 票 Attacker can use any non-enabled capabilityCosmos · 2025-01-15 · 低危 · $2,000 · 81 票 Subdomain takeover at signup.uber.comUber · 2019-01-25 · 中危 · 79 票 Subdomain takeover #2 at info.hacker.oneHackerOne · 2017-04-28 · 低危 · 78 票 Pending invites remain valid even after the inviter is removed.Omise · 2025-10-08 · 中危 · 77 票 Parental Pin BypassShowmax · — · 未评级 · $2,000 · 75 票 Password Reset link hijacking via Host Header PoisoningConcrete CMS · 2017-06-06 · 低危 · 73 票 Arbitrary File Write as SYSTEM from unprivileged userValve · 2020-01-15 · 中危 · $1,250 · 71 票 China - president-starbucks.com.cn DNS configuration reported as takeoverStarbucks · 2020-03-17 · 中危 · 71 票 Subdomain takeover of main domain of https://www.cyberlynx.lu/Acronis · 2021-10-12 · 低危 · $100 · 70 票 Unprivileged alliance member is able to recruit new members to his alliance and accepting them (xs1.grepolis.com)InnoGames · — · 未评级 · $550 · 70 票 Subdomain takeover on rider.uber.com due to non-existent distribution on CloudfrontUber · 2016-12-12 · 未评级 · 69 票 Non Org Admin/Group Manager can create groups in an organizationHackerOne · 2024-07-23 · 中危 · 68 票 A non-privileged user may create an admin account in StockyShopify · 2021-11-25 · 低危 · 67 票 Privilege escalation of "external user" (with maintainer privilege) to internal access through project tokenGitLab · 2021-10-11 · 低危 · 66 票 Bug Report #23JAN136 (subdomain takeover via shopify )Mars · 2025-09-02 · 中危 · 63 票 Insecure Infrastructure Integrations YML Loading leads to Windows Privilege EscalationNew Relic · — · 未评级 · 63 票 Privilege Escalation leads to Unauthorized Access to Private Conversations By any Regular user [Read , Edit and Delete]Dust · 2025-04-29 · 高危 · 62 票 Pivilege escalation of any new user to Keymaster caused by CSRFWordPress · 2025-09-13 · 低危 · 61 票 subdomain takeover on fddkim.zomato.comEternal · 2022-01-27 · 低危 · 61 票 Ability to access all user authentication tokens, leads to RCEGitLab · 2016-11-03 · 高危 · 61 票 Unquoted Service Path in "Rockstar Game Library Service"Rockstar Games · 2019-12-02 · 低危 · 60 票 [Privilege Escalation] User can Pin|Unpin Any Comment on Any Project or LocaleMozilla · 2026-03-20 · 低危 · 59 票 Privilege Escalation by abusing non-existent path. (Windows)PortSwigger Web Security · 2019-03-13 · 低危 · 59 票 Privilege escalation - Support-Contributor to Support and Product Admin via `/api/v2/██████` . No ADMIN PRIVILEGE required.Zendesk · — · 未评级 · 58 票 Subdomain takeover #3 at info.hacker.oneHackerOne · 2017-06-21 · 低危 · 58 票 Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryUbiquiti Inc. · 2016-11-27 · 未评级 · 57 票 Authenticated kubernetes principal with restricted permissions can retrieve ingress-nginx serviceaccount token and secrets across all namespacesKubernetes · 2021-12-04 · 中危 · 55 票 Subdomain takeover on dev-admin.periscope.tvX / xAI · 2019-05-28 · 低危 · 55 票 Social Club Account Takeover Via RGL And Steam/Epic Linked AccountRockstar Games · 2021-11-17 · 中危 · 53 票 Privilege Escalation in kOps using GCE/GCP ProviderKubernetes · 2023-08-04 · 中危 · $2,500 · 52 票 Privilege Escalation: Read-Only to AdminInflection · 2019-03-15 · 中危 · 51 票 Bug Report #23JAN135 (subdomain takeover via shopify )Mars · 2025-09-02 · 中危 · 50 票 Uncontrolled Search Path Element allows DLL hijacking for priv esc to SYSTEMGlassWire · 2021-06-04 · 中危 · $250 · 50 票 Subdomain takeover #4 at info.hacker.oneHackerOne · 2017-06-21 · 低危 · 50 票 Guest users can create new test casesGitLab · 2021-08-30 · 低危 · $650 · 49 票 Privilege Escalation - "Analyst" Role Can View Email Domains of a Company - [GET /voyager/api/voyagerOrganizationDashEmailDomainMappings]LinkedIn · 2022-08-26 · 低危 · 48 票 Able to Login deactivated staff account in shopify app mobileShopify · 2016-11-29 · 未评级 · 48 票 From nobody to somebodyKeybase · — · 未评级 · 47 票 [Vertical Privilege Escalation] User can Unapproved any Approved Translation at [/translations/unapprove/]Mozilla · 2026-04-10 · 低危 · 46 票 China - ecjobsdc.starbucks.com.cn html/shtml file upload vulnerabilityStarbucks · 2020-01-29 · 中危 · 46 票 Non privileged user is able to approve his own app himself leading to mass privilege escalations.Lark Technologies · 2021-11-20 · 中危 · 45 票 Privilege Escalation leading to post in channel without having privilegeMattermost · 2021-09-13 · 低危 · 45 票 Subdomain Takeover - https://competition.shopify.com/Shopify · 2018-06-19 · 低危 · 45 票 WASI sandbox escape via symlinkNode.js · 2025-05-24 · 低危 · 44 票 Выполнение API-методов при открытии сообщества/приложенияVK.com · 2021-12-30 · 中危 · $2,000 · 44 票 macOS privilege escalationKeybase · — · 未评级 · 44 票 Privilege Escalation удаляем все созданные ссылки с okl.ltok.ru · 2019-07-23 · 高危 · 44 票 Email Verification Bypass Allows Users to Add & verify Any Email As Guardians EmailKhan Academy · 2022-12-17 · 中危 · 42 票 Vulnerabilities chain leading to privilege escalationNord Security · — · 未评级 · 42 票 Privilege Escalation via Keybase Helper (incomplete security fix)Keybase · — · 未评级 · 42 票 Getting a free delivery by singing up from "[email protected]"Glovo · 2022-07-11 · 低危 · 41 票 Bypass User Interaction to initiate a VoIP call to Another UserVK.com · 2018-11-12 · 低危 · $500 · 41 票 NordVPN Linux Client - Unsafe service file permissions leads to Local Privilege EscalationNord Security · — · 未评级 · 40 票 Subdomain takeover of ███.wavecell.com8x8 · 2021-05-02 · 中危 · 39 票 Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Logitech · 2021-04-27 · 低危 · 38 票 Arbitrary file creation via symlink attack on syncagentsrv (Acronis Sync Agent Service)Acronis · 2021-03-16 · 中危 · 38 票 Arbitrary code execution in TSEC Heavy Secure, return-oriented programming in TSEC Secure ROM, and recovery of TSEC-derived cryptographic secretsNintendo · 2024-07-22 · 低危 · 38 票 [IDOR][translate.twitter.com] Opportunity to change any comment at the forumX / xAI · 2017-05-12 · 低危 · 38 票 Low Privileged user can add or remove cash to/from sales registerShopify · 2021-06-16 · 低危 · 37 票 subdomain takeover at status0.stripo.emailStripo Inc · 2019-12-23 · 低危 · 36 票 Permission model improperly processes UNC pathsNode.js · 2024-07-15 · 低危 · 35 票

查看全部 455 份报告 →