Free Premium Article | Black Hat Ethical Hacking

XSS Vulnerability in the “Get a Quote” form while bypassing WordFence and CloudFlare

Jun 24, 2025 | Articles, Free Premium Article

During an external penetration testing, we uncovered a Cross-Site Scripting (XSS) vulnerability in the newly introduced “Get a Quote” form on the client’s website. This weakness allows malicious script injection via user input, which was not caught by existing defenses (including Wordfence and Cloudflare Web Application Firewall).

Oracle ILOM Compromise via EternalBlue

Jun 17, 2025 | Articles, Free Premium Article

During a penetration testing assessment, our team identified a critical exploitation chain affecting an enterprise network. The attack began by exploiting the EternalBlue vulnerability on an unpatched Windows server, allowing remote code execution.

XSS Vulnerability in the “Get a Quote” form while bypassing WordFence and CloudFlare

Oracle ILOM Compromise via EternalBlue

Recent News

Freight Brokers Hit by RMM-Based Cyber Attacks Aimed at Physical Cargo Theft

AdaptixC2: Open-Source C2 Tool Gains Traction with Ransomware-Linked Actors

Nearly 76,000 WatchGuard Firebox Appliances Exposed — Critical IKEv2 RCE (CVE-2025-9242)

LinkPro Rootkit: New eBPF-Backed GNU/Linux Backdoor Found in Compromised AWS Environments

Pixnapping: New Android Side-Channel Steals 2FA Codes Pixel-by-Pixel

ChaosBot: Rust Backdoor Uses Discord C2 — Chaos Ransomware Adds Destructive & Clipboard-Hijack Features

Redis Fixes 13-Year-Old CVSS 10.0 “RediShell” Bug Allowing Remote Code Execution

Crimson Collective Claims Red Hat GitLab Breach, 570GB Data Stolen

CISA Adds Critical Sudo “chroot” Flaw to KEV

Kali Linux 2025.3 released with 10 New Tools, Nexmon Wi-Fi Injection for Raspberry Pi and Vagrant Updates