Rhino Security Labs

Strategic & Technical Blog

Technical Strategic Technical & Strategic Both
Application Security

Vulnerabilities Leading to RCE in
LabKey Server Biomedical Research Platform

David Yesland
October 29, 2019

This blog is a walkthrough of the three different vulnerabilities we discovered in the LabKey Server, a biomedical research platform–Stored XSS (CVE-2019-9758), CSRF leading to RCE (CVE-2019-9926), and XXE (CVE-2019-9757) allowing…

Read more
Application Security

CompleteFTP Server Local Privilege Escalation
CVE-2019-16116

AWS

Abusing VPC Traffic Mirroring in AWS

Technical Strategic Technical & Strategic Both
Categories
Clear Selection
API
Application Security
AWS
Azure
Buyer's Guide
Cloud Security
Compliance
Enterprise Security
GCP
Internet of Things
Mobile Security
Network Security
News
Penetration Testing
Research
Social Engineering
Tool Development
AWS

Exploiting AWS ECR and ECS with
the Cloud Container Attack Tool (CCAT)

Jack Ganbold

UPDATE: As of 10/03/19, CCAT now supports Container Registry on GCP…

Read more