Multiple Vulnerabilities in Frappe LMS Leading to Remote Code Execution

Referral Beware, Your Rewards are Mine (Part 1)

Referral rewards programs are nearly ubiquitous today, from consumer tech to SaaS companies, but are rarely given much security oversight.

Multiple CVEs in Infoblox NetMRI: RCE, Auth Bypass, SQLi, and File Read Vulnerabilities  

While performing research on Infoblox's NetMRI network automation and configuration management solution, we discovered 5 vulnerabilities.

CVE-2025-26147: Authenticated RCE In Denodo Scheduler 

Rhino Security Labs found CVE-2025-26147 in Denodo Scheduler, an application administrators use to configure servers, databases, and specify forms of authentication.

CVE-2024-55963: Unauthenticated RCE in Default-Install of Appsmith

The Rhino research team decided to take a look at the Appsmith Enterprise Edition product. This led to the discovery of three new CVEs.

CVE-2025-0693: AWS IAM User Enumeration

Rhino Security Labs discovered two username enumeration vulnerabilities in the AWS Web Console.

CVE-2024-46507: Yeti Platform Server-Side Template Injection (SSTI)

Yeti is a Forensic Intelligence platform and pipeline for DFIR teams. Rhino Security Labs will detail 2 security flaws that, combined, lead to unauthenticated RCE.

CloudGoat Official Walkthrough Series: ‘sqs_flag_shop’

This post walks through a new CloudGoat scenario, sqs_flag_shop in AWS.

CloudGoat Official Walkthrough Series: ‘glue_privesc’

Vestaboard: Exploring Broken Access Controls and Privilege Escalation

During research on the Vestaboard web platform, the Rhino Security Labs research team identified three vulnerable instances of Broken Access Controls.