CVE-2026-86911

CVE-2026-86911 affects macOS (fixed in macOS Golden Gate 27 ). The vulnerability stems from insufficient state management , allowing a malicious app to bypass clickjacking protections for secure prompts. The fix introduces improved state management. No exploitation details or in-the-wild activity...

EUVD-2026-77986

This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to bypass clickjacking protections for secure prompts...

clickjacking-poc

Clickjacking PoC Tool A basic tool to generate clickjacking proof of concepts based on a given URL. Building Building should be simple... root@kitploit: $ go get $ go build Usage Basic usage: clickjacking-poc -u https://example.com The tool can also be used to open the PoC up in the browser:...

CVE-2023-38873-G1

🚨 G1 = A05:2021 – Security Misconfiguration ClickJacking ⚠️ Base Score: 6.5 MEDIUM Scale: CVSS ⚠️ 📌 Description This repository demonstrates a Clickjacking security flaw present on the G1 website. The vulnerability allows an attacker to load the site inside an iframe , overlaying malicious elements...

Clickjacking-Exploit-Detector

Clickjacking-Exploit-Detector Clickjacking 漏洞利用 检测器使用网页扫描技术来识别潜在漏洞，并对这些元素进行分析。 功能特性 HTML 扫描：检查可能被用于点击劫持（Clickjacking）的 HTML 元素和 iframe 元素。 潜在点击劫持警告：提供关于潜在点击劫持漏洞的报告和建议。 检测 frame-ancestors 标头：检查网站上的 Content-Security-Policy 标头是否能够防御点击劫持。 UI 遮挡检测：检查网站元素是否被隐藏或与其他元素重叠。 使用方法 1. 从 Python 官方网站下载并安装...

quickjack

Quickjack Quickjack is an intuitive, point-and-click tool for performing advanced and covert clickjacking and frame slicing attacks. Use the Quickjack tool directly at http://samy.pl/quickjack/quickjack.html by @SamyKamkar // [email protected] // http://samy.pl // Dec 22, 2014 Code available...

html-poc

Proof of concept code for client-side vulnerabilities Basic HTML proof of concepts for issues such as: Clickjacking insecure CORS settings CSRF Tabnapping XSSI postMessage issues Most of these are pretty basic, but having them all in one place avoids writing the same things over and over again. T...

Astra Linux – Vulnerability in Firefox

Widget-related Clickjacking issue with the Gtk component. This vulnerability has been fixed in Firefox 152 and Thunderbird 152...

Clickjacking-Tester

Clickjacking Tester A python script designed to check if the website is vulnerable of clickjacking and creates a poc. Screenshot Usage root@kitploit: python3 clickjackingtester.py Example Input root@kitploit: python clickjackingtester.py sites.txt sites.txt root@kitploit: www.google.com...

tarnish

tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...

XSSTracer

XSSTracer v1.3 作者: 1N3 @CrowdShield https://crowdshield.com XSSTracer は、リモートWebサーバーにおけるクリックジャッキング、クロスフレームスクリプティング、クロスサイトトレーシング、ホストヘッダーインジェクションを検査する小さなPythonスクリプトです。 root@kitploit: Usage: ./xsstracer...

unilogies/bumsys < v2.0.2 - Clickjacking

This template checks for the presence of clickjacking prevention headers in the HTTP response, aiming to identify vulnerabilities related to the improper restriction of rendered UI layers or frames in the GitHub repository unilogies/bumsys prior to version 2.0.2. id: CVE-2023-1362 info: name:...

CVE-2026-87486

Clickjacking in TrustedWebActivities in Google Chrome on on Android pr...

CVE-2026-87538

Clickjacking in Input in Google Chrome prior to 153.0.8010.36 allowed...

CVE-2026-87655

Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allo...

CVE-2026-87538

A flaw was found in Chromium. A remote attacker, after compromising the renderer process and leveraging social engineering, could exploit a clickjacking vulnerability in the input mechanism. This could allow the attacker to spoof user interface UI elements via a specially crafted HTML page,...

CVE-2026-87486

A flaw was found in Google Chrome. This clickjacking vulnerability allows a local attacker, through a co-installed application, to spoof the address bar. This could mislead users about the authenticity of the displayed website...

CVE-2026-87655

A flaw was found in chromium-browser. This vulnerability, known as clickjacking, allows a remote attacker to trick users into performing unintended actions by overlaying malicious content over legitimate user interface UI elements. By leveraging social engineering and a specially crafted HTML pag...

DEBIAN-CVE-2026-87655

Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87655

Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...