by Fabian Crespo | Sep 10, 2026 | Blog
This post documents two cross-site scripting (XSS) vulnerabilities in OpenEMR versions below 8.3.0. A stored XSS vulnerability identified allows an authenticated user administrator or clinician to embed malicious JavaScript code directly into the server’s database....
by Fabian Crespo | Nov 8, 2023 | Blog
Author: Fabian Crespo, Consultant, Technical Testing Microsoft Active Directory (AD) (Azure Active Directory has been renamed to Microsoft Entra ID) is an attractive target for cyber attackers because it is central to an organization’s IT infrastructure, providing...