Free Premium Article | Black Hat Ethical Hacking

XSS Vulnerability in the “Get a Quote” form while bypassing WordFence and CloudFlare

Jun 24, 2025 | Articles, Free Premium Article

During an external penetration testing, we uncovered a Cross-Site Scripting (XSS) vulnerability in the newly introduced “Get a Quote” form on the client’s website. This weakness allows malicious script injection via user input, which was not caught by existing defenses (including Wordfence and Cloudflare Web Application Firewall).

Oracle ILOM Compromise via EternalBlue

Jun 17, 2025 | Articles, Free Premium Article

During a penetration testing assessment, our team identified a critical exploitation chain affecting an enterprise network. The attack began by exploiting the EternalBlue vulnerability on an unpatched Windows server, allowing remote code execution.

XSS Vulnerability in the “Get a Quote” form while bypassing WordFence and CloudFlare

Oracle ILOM Compromise via EternalBlue

Recent News

Critical nginx-ui Flaw Under Active Exploitation Enables Full Server Takeover

React2Shell Exploited in Mass Credential Harvesting Campaign Targeting 700+ Hosts

EvilTokens Phishing Service Fuels Large-Scale Microsoft 365 Account Takeover Campaign

Attackers Impersonate IT Support on Microsoft Teams to Deploy A0Backdoor Malware

State-Sponsored Attack Hijacks Notepad++ Update Infrastructure to Deliver Malware

Fortinet Fixes Actively Exploited FortiOS SSO Auth Bypass

CISA Flags Actively Exploited VMware vCenter RCE in KEV Catalog

Reprompt Attack Lets Attackers Exfiltrate Data From Microsoft Copilot With a Single Click

Node.js Fixes Critical DoS Flaw That Could Crash “Virtually Every Production App”

Actively Exploited D-Link Router Flaw Enables Unauthenticated Remote Code Execution