unilogies/bumsys < v2.0.2 - Clickjacking

This template checks for the presence of clickjacking prevention headers in the HTTP response, aiming to identify vulnerabilities related to the improper restriction of rendered UI layers or frames in the GitHub repository unilogies/bumsys prior to version 2.0.2. id: CVE-2023-1362 info: name:...

html-poc

Codice proof-of-concept per vulnerabilità lato client Semplici proof of concept HTML per problemi come: Clickjacking impostazioni CORS non sicure CSRF Tabnapping XSSI problemi con postMessage La maggior parte di questi sono abbastanza semplici, ma averli tutti in un unico posto evita di riscriver...

XSSTracer

XSSTracer v1.3 di 1N3 @CrowdShield https://crowdshield.com XSSTracer è un piccolo script python che controlla i server web remoti per Clickjacking, Cross-Frame Scripting, Cross-Site Tracing e Host Header Injection. root@kitploit: Usage: ./xsstracer...

quickjack

Quickjack Quickjack ist ein intuitives Point-and-Click-Werkzeug zur Durchführung fortgeschrittener und verdeckter Clickjacking- und Frame-Slicing-Angriffe. Verwenden Sie das Quickjack-Tool direkt unter http://samy.pl/quickjack/quickjack.html von @SamyKamkar // [email protected] //...

tarnish

tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...

Clickjacking-Tester

Clickjacking Tester Uno script Python progettato per verificare se il sito web è vulnerabile al clickjacking e crea un PoC. Screenshot Utilizzo root@kitploit: python3 clickjackingtester.py Esempio Input root@kitploit: python clickjackingtester.py sites.txt sites.txt root@kitploit: www.google.com...

CVE-2026-54477

CVE-2026-54477: Im Admin-Panel fehlende Security-Header Clickjacking / XSS Advisory Feld| Wert ---|--- CVE| CVE-2026-54477 ICSA| ICSA-26-183-03 Gardyn IoT Hub CVSS 3.1| 5.4 Mittel Vector 3.1| CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Vector 4.0|...

CVE-2023-38873-G1

🚨 G1 = A05:2021 – Security Misconfiguration ClickJacking ⚠️ Punteggio base: 6.5 MEDIO Scala: CVSS ⚠️ 📌 Descrizione Questo repository dimostra una falla di sicurezza del tipo Clickjacking presente nel sito del G1. La vulnerabilità consente a un attaccante di caricare il sito all'interno di un iframe...

EUVD-2026-67287

The affected Ebyte device web management interface does not restrict the interface from being rendered within an external frame. An unauthenticated remote attacker could use a crafted webpage to mislead an authenticated administrator into initiating unintended configuration changes or disruptive...

CVE-2026-75548

The affected Ebyte device web management interface does not restrict the interface from being rendered within an external frame. An unauthenticated remote attacker could use a crafted webpage to mislead an authenticated administrator into initiating unintended configuration changes or disruptive...

CVE-2026-75548

CVE-2026-75548 affects the web management interface of the Ebyte NE2-D11 device. The interface lacks a frame-restriction mechanism (e.g., X-Frame-Options or CSP frame-ancestors), allowing an unauthenticated remote attacker to embed the interface within a crafted external page. This enables a clic...

CVE-2026-75548 Ebyte NE2-D11 Improper Restriction of Rendered UI Layers or Frames

The affected Ebyte device web management interface does not restrict the interface from being rendered within an external frame. An unauthenticated remote attacker could use a crafted webpage to mislead an authenticated administrator into initiating unintended configuration changes or disruptive...

clickjacking-poc

Clickjacking-PoC-Tool Ein einfaches Tool zum Erzeugen von Clickjacking-Proof-of-Concept-Dateien auf Basis einer angegebenen URL. Erstellen Das Erstellen sollte einfach sein ... root@kitploit: $ go get $ go build Verwendung Grundlegende Verwendung: clickjacking-poc -u https://example.com Das Tool...

Clickjacking-Exploit-Detector

Clickjacking-Exploit-Detector O Detector de Clickjacking Exploit usa técnicas de varredura de páginas da web para identificar possíveis vulnerabilidades e fornecer análise desses elementos. Recursos Varredura de HTML: Verifica elementos HTML e elementos iframe que podem ser explorados para...

PT-2026-82788

The affected Ebyte device web management interface does not restrict the interface from being rendered within an external frame. An unauthenticated remote attacker could use a crafted webpage to mislead an authenticated administrator into initiating unintended configuration changes or disruptive...

Astra Linux – Vulnerability in Firefox

Widget-related Clickjacking issue with the Gtk component. This vulnerability has been fixed in Firefox 152 and Thunderbird 152...

CVE-2026-74951

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue in Firefox for Android...

CVE-2026-74980

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue in the Downloads component in Firefox for Android...

CVE-2026-74980

Clickjacking issue in the Downloads component in Firefox for Android...

Linux Distros Unpatched Vulnerability : CVE-2026-74980

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Clickjacking issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154. CVE-2026-74980 Note that Nessus relies on the...