Strategic & Technical Blog
During research on the Vestaboard web platform, the Rhino research team identified three instances of Broken Access Controls.
Read-Access to other Vestaboards.
Ability to update names of other users.
Privilege escalation from Admin to…
While researching the Progress Kemp LoadMaster load balancer we discovered an unauthenticated command injection in the administrator web interface of the appliance. This allowed full compromise of the LoadMaster if you could reach the…