3972 matches found
tarnish
tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...
Clickjacking-Exploit-Detector
Clickjacking-Exploit-Detector El Clickjacking Exploit Detector utiliza técnicas de escaneo de páginas web para identificar posibles vulnerabilidades y proporcionar análisis de esos elementos. Características Escaneo de HTML: Comprueba elementos HTML y elementos iframe que pueden ser explotados pa...
Clickjacking-Tester
Probador de Clickjacking Un script de Python diseñado para comprobar si el sitio web es vulnerable a clickjacking y crea un poc. Captura de pantalla Uso root@kitploit: python3 clickjackingtester.py Ejemplo Entrada root@kitploit: python clickjackingtester.py sites.txt sites.txt root@kitploit:...
CVE-2023-38873-G1
🚨 G1 = A05:2021 – Security Misconfiguration ClickJacking ⚠️ Puntuación base: 6.5 MEDIO Escala: CVSS ⚠️ 📌 Descripción Este repositorio demuestra una falla de seguridad del tipo Clickjacking presente en el sitio del G1. La vulnerabilidad permite que un atacante cargue el sitio dentro de un iframe ,...
quickjack
Quickjack Quickjack es una herramienta intuitiva de apuntar y hacer clic para realizar ataques avanzados y encubiertos de clickjacking y frame slicing. Use la herramienta Quickjack directamente en http://samy.pl/quickjack/quickjack.html por @SamyKamkar // [email protected] // http://samy.pl ...
html-poc
Código de prueba de concepto para vulnerabilidades del lado del cliente Pruebas de concepto básicas en HTML para problemas como: Clickjacking Configuración insegura de CORS CSRF Tabnapping XSSI Problemas con postMessage La mayoría de estas son bastante básicas, pero tenerlas todas en un solo luga...
XSSTracer
XSSTracer v1.3 by 1N3 @CrowdShield https://crowdshield.com XSSTracer es un pequeño script en Python que verifica servidores web remotos en busca de Clickjacking, Cross-Frame Scripting, Cross-Site Tracing e Inyección de Cabecera de Host. root@kitploit: Usage: ./xsstracer...
unilogies/bumsys < v2.0.2 - Clickjacking
This template checks for the presence of clickjacking prevention headers in the HTTP response, aiming to identify vulnerabilities related to the improper restriction of rendered UI layers or frames in the GitHub repository unilogies/bumsys prior to version 2.0.2. id: CVE-2023-1362 info: name:...
CVE-2026-54477
CVE-2026-54477: Panel de administración sin cabeceras de seguridad clickjacking / XSS Aviso Campo| Valor ---|--- CVE| CVE-2026-54477 ICSA| ICSA-26-183-03 Gardyn IoT Hub CVSS 3.1| 5.4 Medio Vector 3.1| CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Vector 4.0|...
CVE-2026-86911
This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to bypass clickjacking protections for secure prompts...
CVE-2026-86911
CVE-2026-86911 is a clickjacking protection bypass in macOS Golden Gate 27 that can allow a malicious app to bypass secure prompt protections. The root cause is an improper state management issue, addressed with improved state management in the same release. The CVSS v3.1 base score is 5.5 (Mediu...
EUVD-2026-77986
This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to bypass clickjacking protections for secure prompts...
CVE-2026-86911
This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to bypass clickjacking protections for secure prompts...
Astra Linux – Vulnerability in Firefox
Widget-related Clickjacking issue with the Gtk component. This vulnerability has been fixed in Firefox 152 and Thunderbird 152...
CVE-2026-87538
A flaw was found in Chromium. A remote attacker, after compromising the renderer process and leveraging social engineering, could exploit a clickjacking vulnerability in the input mechanism. This could allow the attacker to spoof user interface UI elements via a specially crafted HTML page,...
CVE-2026-87486
A flaw was found in Google Chrome. This clickjacking vulnerability allows a local attacker, through a co-installed application, to spoof the address bar. This could mislead users about the authenticity of the displayed website...
CVE-2026-87655
A flaw was found in chromium-browser. This vulnerability, known as clickjacking, allows a remote attacker to trick users into performing unintended actions by overlaying malicious content over legitimate user interface UI elements. By leveraging social engineering and a specially crafted HTML pag...
CVE-2026-87655
Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-87655
Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...