Free Premium Article | Black Hat Ethical Hacking

XSS Vulnerability in the “Get a Quote” form while bypassing WordFence and CloudFlare

Jun 24, 2025 | Articles, Free Premium Article

During an external penetration testing, we uncovered a Cross-Site Scripting (XSS) vulnerability in the newly introduced “Get a Quote” form on the client’s website. This weakness allows malicious script injection via user input, which was not caught by existing defenses (including Wordfence and Cloudflare Web Application Firewall).

Oracle ILOM Compromise via EternalBlue

Jun 17, 2025 | Articles, Free Premium Article

During a penetration testing assessment, our team identified a critical exploitation chain affecting an enterprise network. The attack began by exploiting the EternalBlue vulnerability on an unpatched Windows server, allowing remote code execution.

XSS Vulnerability in the “Get a Quote” form while bypassing WordFence and CloudFlare

Oracle ILOM Compromise via EternalBlue

Recent News

State-Sponsored Attack Hijacks Notepad++ Update Infrastructure to Deliver Malware

Fortinet Fixes Actively Exploited FortiOS SSO Auth Bypass

CISA Flags Actively Exploited VMware vCenter RCE in KEV Catalog

Reprompt Attack Lets Attackers Exfiltrate Data From Microsoft Copilot With a Single Click

Node.js Fixes Critical DoS Flaw That Could Crash “Virtually Every Production App”

Actively Exploited D-Link Router Flaw Enables Unauthenticated Remote Code Execution

Kali Linux 2025.4 Released With 3 new tools, Desktop Overhauls, and Halloween Mode

New Phishing Kits Automate MFA Bypass, AI Email Lures, and Bank Credential Theft at Scale

Malicious VS Code Extensions Infect Developers With Infostealers and Session Hijackers

React2Shell – Critical Bug Exposes React Server Components to Unauthenticated Remote Code Execution