Big thanks to DAY[0] for featuring Rhino CVE-2024-23724, Stored XSS in Ghost CMS leading to "Owner" takeover, on their most recent podcast. Day[0] reviews the full vulnerability details and provide expert analysis: bit.ly/3IgiCHJ

New Blog Post: CVE-2024-1212: Unauthenticated Command Injection In Progress Kemp LoadMaster bit.ly/3VonEtj

New Blog Post: CVE-2024-2448: Authenticated Command Injection In Progress Kemp LoadMaster bit.ly/3TYomez

New Blog Post: CVE-2024-2389: Command Injection Vulnerability In Progress Flowmon bit.ly/3xPfpwP

Now hiring: Associate Application Pentester Does this sound like you? Now accepting applications! bit.ly/4ciGrLU

New Blog Post: Vestaboard: Exploring Broken Access Controls and Privilege Escalation bit.ly/3YA7pew

Cloudgoat: We've created scenario guidelines and example template scenario to help the community build new scenarios. Get started today - bit.ly/4d4Ay4W

New Blog Post: CloudGoat Official Walkthrough Series: ‘glue_privesc’ bit.ly/3ZdBuAM

New Blog Post: CloudGoat: New Scenario and Walkthrough (sns_secrets) bit.ly/3BNFyy8

New Rhino Blog Post: CloudGoat Official Walkthrough Series: ‘sqs_flag_shop’ bit.ly/4ggbcmQ

We're hiring for an Account Manager! Looking to grow in your sales career and build technical expertise on the way? We might be a fit - lets chat! Details and application: bit.ly/3Do9aCH

New Rhino Blog Post: CVE-2024-46507: Yeti Platform Server-Side Template Injection (SSTI) bit.ly/4hBGBRo

New Rhino Blog Post: CVE-2024-46506: Unauthenticated RCE in NetAlertx bit.ly/3PRjqXn

New Rhino Blog Post: CVE-2025-0693: AWS IAM User Enumeration bit.ly/3QcEpnx

CloudGoat is our free "vulnerable by design" AWS Deployment tool. We redesigned the scenarios to make it easier for you to get started! We created categories and grouped them by difficulty. Launch your first scenario here: bit.ly/3F7QBUv

New Rhino Blog Post: CVE-2024-55963: Unauthenticated RCE in Default-Install of Appsmith bit.ly/4j1Eyqo

New Rhino Blog Post: Newest Pacu Module: Secret Enumeration in Elastic Beanstalk bit.ly/42nQNYR

New Rhino Blog Post: CVE-2025-26147: Authenticated RCE In Denodo Scheduler bit.ly/4jhmNTA

New Rhino Blog Post: Multiple CVEs in Infoblox NetMRI: RCE, Auth Bypass, SQLi, and File Read Vulnerabilities bit.ly/45HHEwb