Free Premium Article | Black Hat Ethical Hacking

XSS Vulnerability in the “Get a Quote” form while bypassing WordFence and CloudFlare

Jun 24, 2025 | Articles, Free Premium Article

During an external penetration testing, we uncovered a Cross-Site Scripting (XSS) vulnerability in the newly introduced “Get a Quote” form on the client’s website. This weakness allows malicious script injection via user input, which was not caught by existing defenses (including Wordfence and Cloudflare Web Application Firewall).

Oracle ILOM Compromise via EternalBlue

Jun 17, 2025 | Articles, Free Premium Article

During a penetration testing assessment, our team identified a critical exploitation chain affecting an enterprise network. The attack began by exploiting the EternalBlue vulnerability on an unpatched Windows server, allowing remote code execution.

XSS Vulnerability in the “Get a Quote” form while bypassing WordFence and CloudFlare

Oracle ILOM Compromise via EternalBlue

Recent News

React2Shell – Critical Bug Exposes React Server Components to Unauthenticated Remote Code Execution

Researchers Infiltrate Lazarus Group’s “Famous Chollima” Job-Fraud Network Using Fake Developer Laptops

Matrix Push C2 Emerges as Browser-Based C2 Platform Using Fake Notifications for Cross-Platform Attacks

Sneaky2FA Phishing Kit Adds Browser-in-the-Browser (BitB) to Steal Microsoft 365 Sessions

New ClickFix Campaign “EVALUSION” Deploys Amatera Stealer and NetSupport RAT

Maverick Malware Campaign Expands: WhatsApp-Propagated Banking Trojan Linked to Coyote

Hotel Managers Targeted by ClickFix Phishing – PureRAT Used to Harvest Booking.com Credentials

Freight Brokers Hit by RMM-Based Cyber Attacks Aimed at Physical Cargo Theft

AdaptixC2: Open-Source C2 Tool Gains Traction with Ransomware-Linked Actors

Nearly 76,000 WatchGuard Firebox Appliances Exposed — Critical IKEv2 RCE (CVE-2025-9242)