4622 matches found
EUVD-2026-113739
The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.8.6 This is due to the MCP module's OAuth 2.1 Dynamic Client Registration endpoint /wp-json/mcp/v1/oauth/register being registered with...
CVE-2026-110732
The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin is vulnerable to Missing Authorization in versions up to and including 3.8.6 . The issue stems from the MCP module's OAuth 2.1 Dynamic Client Registration endpoint (/wp-json/mcp/v1/oauth/register) using a permission_callback of ...
tarnish
tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...
CVE-2026-54477
CVE-2026-54477: Admin Panel Missing Security Headers clickjacking / XSS Advisory Field| Value ---|--- CVE| CVE-2026-54477 ICSA| ICSA-26-183-03 Gardyn IoT Hub CVSS 3.1| 5.4 Medium Vector 3.1| CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Vector 4.0|...
unilogies/bumsys < v2.0.2 - Clickjacking
This template checks for the presence of clickjacking prevention headers in the HTTP response, aiming to identify vulnerabilities related to the improper restriction of rendered UI layers or frames in the GitHub repository unilogies/bumsys prior to version 2.0.2. id: CVE-2023-1362 info: name:...
html-poc
Proof of concept code for client-side vulnerabilities Basic HTML proof of concepts for issues such as: Clickjacking insecure CORS settings CSRF Tabnapping XSSI postMessage issues Most of these are pretty basic, but having them all in one place avoids writing the same things over and over again. T...
clickjacking-poc
Clickjacking PoC Tool A basic tool to generate clickjacking proof of concepts based on a given URL. Building Building should be simple... $ go get $ go build Usage Basic usage: clickjacking-poc -u https://example.com The tool can also be used to open the PoC up in the browser: clickjacking-poc -b...
XSSTracer
XSSTracer v1.3 by 1N3 @CrowdShield https://crowdshield.com XSSTracer is a small python script that checks remote web servers for Clickjacking, Cross-Frame Scripting, Cross-Site Tracing and Host Header Injection. Usage: ./xsstracer...
quickjack
Quickjack Quickjack is an intuitive, point-and-click tool for performing advanced and covert clickjacking and frame slicing attacks. Use the Quickjack tool directly at http://samy.pl/quickjack/quickjack.html by @SamyKamkar // [email protected] // http://samy.pl // Dec 22, 2014 Code available...
Clickjacking-Tester
Clickjacking Tester A python script designed to check if the website is vulnerable of clickjacking and creates a poc. Screenshot Usage python3 clickjackingtester.py Example Input python clickjackingtester.py sites.txt sites.txt www.google.com www.turkhackteam.com Output Checking www.google.com -...
CVE-2023-38873-G1
🚨 G1 = A05:2021 – Security Misconfiguration ClickJacking ⚠️ Base Score: 6.5 MEDIUM Scale: CVSS ⚠️ 📌 Description This repository demonstrates a Clickjacking security flaw present on the G1 website. The vulnerability allows an attacker to load the site inside an iframe , overlaying malicious elements...
CVE-2026-67079
HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application within a malicious web page or iframe and trick users into performing unintended actions, potentially leading to unauthorized transactions or changes to their accounts...
EUVD-2026-112032
HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application within a malicious web page or iframe and trick users into performing unintended actions, potentially leading to unauthorized transactions or changes to their accounts...
CVE-2026-67079 HCL BigFix AEX is affected by multiple security vulnerabilities.
HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application within a malicious web page or iframe and trick users into performing unintended actions, potentially leading to unauthorized transactions or changes to their accounts...
CVE-2026-67079
HCL BigFix AEX is affected by a Clickjacking vulnerability (CWE-1021). This flaw allows an attacker to embed the application within a malicious web page or an iframe , tricking users into performing unintended actions. Such actions could potentially lead to unauthorized transactions or modificati...
PT-2026-128227
HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application within a malicious web page or iframe and trick users into performing unintended actions, potentially leading to unauthorized transactions or changes to their accounts...
Clickjacking-Exploit-Detector
Clickjacking-Exploit-Detector The Clickjacking Exploit Detector uses webpage scanning techniques to identify potential vulnerabilities and provide analysis of those elements. Features HTML Scanning: Checks HTML elements and iframe elements that can be exploited for clickjacking. Warning of...
Chromium CVE-2026-106400: Clickjacking in Messages
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2026-77062
The boneIO Black web interface lacks proper clickjacking protections. A remote attacker can embed the control panel in an iframe on a malicious web page and trick an authenticated user on the internal network into clicking buttons that activate relays, open gates, or control blinds. This can lead...
CVE-2026-77062
The boneIO Black web interface is vulnerable to a clickjacking attack due to a lack of proper UI layer protections. A remote attacker can embed the control panel within an iframe on a malicious website to trick authenticated users on the internal network into performing unintended actions, such a...