XSSTracer

XSSTracer v1.3 by 1N3 @CrowdShield https://crowdshield.com XSSTracer es un pequeño script en Python que verifica servidores web remotos en busca de Clickjacking, Cross-Frame Scripting, Cross-Site Tracing e Inyección de Cabecera de Host. root@kitploit: Usage: ./xsstracer...

Clickjacking-Exploit-Detector

Clickjacking-Exploit-Detector Clickjacking 漏洞利用 检测器使用网页扫描技术来识别潜在漏洞，并对这些元素进行分析。 功能特性 HTML 扫描：检查可能被用于点击劫持（Clickjacking）的 HTML 元素和 iframe 元素。 潜在点击劫持警告：提供关于潜在点击劫持漏洞的报告和建议。 检测 frame-ancestors 标头：检查网站上的 Content-Security-Policy 标头是否能够防御点击劫持。 UI 遮挡检测：检查网站元素是否被隐藏或与其他元素重叠。 使用方法 1. 从 Python 官方网站下载并安装...

clickjacking-poc

Herramienta de PoC para Clickjacking Una herramienta básica para generar pruebas de concepto de clickjacking basadas en una URL determinada. Compilación La compilación debería ser sencilla... root@kitploit: $ go get $ go build Uso Uso básico: clickjacking-poc -u https://example.com La herramienta...

CVE-2023-38873-G1

🚨 G1 = A05:2021 – Security Misconfiguration ClickJacking ⚠️ Puntuación base: 6.5 MEDIO Escala: CVSS ⚠️ 📌 Descripción Este repositorio demuestra una falla de seguridad del tipo Clickjacking presente en el sitio del G1. La vulnerabilidad permite que un atacante cargue el sitio dentro de un iframe ,...

tarnish

tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...

Clickjacking-Tester

Clickjacking Tester A python script designed to check if the website is vulnerable of clickjacking and creates a poc. Screenshot Usage root@kitploit: python3 clickjackingtester.py Example Input root@kitploit: python clickjackingtester.py sites.txt sites.txt root@kitploit: www.google.com...

html-poc

Proof of concept code for client-side vulnerabilities Basic HTML proof of concepts for issues such as: Clickjacking insecure CORS settings CSRF Tabnapping XSSI postMessage issues Most of these are pretty basic, but having them all in one place avoids writing the same things over and over again. T...

quickjack

Quickjack Quickjack es una herramienta intuitiva de apuntar y hacer clic para realizar ataques avanzados y encubiertos de clickjacking y frame slicing. Use la herramienta Quickjack directamente en http://samy.pl/quickjack/quickjack.html por @SamyKamkar // [email protected] // http://samy.pl ...

unilogies/bumsys < v2.0.2 - Clickjacking

This template checks for the presence of clickjacking prevention headers in the HTTP response, aiming to identify vulnerabilities related to the improper restriction of rendered UI layers or frames in the GitHub repository unilogies/bumsys prior to version 2.0.2. id: CVE-2023-1362 info: name:...

SUSE CVE-2026-84139

Clickjacking issue in the DOM: Events component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

Linux Distros Unpatched Vulnerability : CVE-2026-84139

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Clickjacking issue in the DOM: Events component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

CVE-2026-84139

Clickjacking issue in the DOM: Events component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

CVE-2026-84139 Clickjacking issue in the DOM: Events component

Clickjacking issue in the DOM: Events component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

EUVD-2026-69087

Clickjacking issue in the DOM: Events component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

CVE-2026-84139

Clickjacking issue in the DOM: Events component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

CVE-2026-84139

A clickjacking vulnerability in the DOM: Events component affects Firefox , Firefox ESR , Thunderbird , and Thunderbird ESR . It was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2. The vulnerability is part of a broader batch of issues disclosed via Mozilla adviso...

CVE-2026-84139

Clickjacking issue in the DOM: Events component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

PT-2026-84192

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird versions prior to 153.2 Description A clickjacking issue exists within the DOM: Events component. Clickjacking is a technique where...

CVE-2026-54477

CVE-2026-54477: Admin Panel Missing Security Headers clickjacking / XSS Advisory Field| Value ---|--- CVE| CVE-2026-54477 ICSA| ICSA-26-183-03 Gardyn IoT Hub CVSS 3.1| 5.4 Medium Vector 3.1| CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Vector 4.0|...

EUVD-2026-67287

The affected Ebyte device web management interface does not restrict the interface from being rendered within an external frame. An unauthenticated remote attacker could use a crafted webpage to mislead an authenticated administrator into initiating unintended configuration changes or disruptive...