3861 matches found
CVE-2022-36736
CVE-2022-36736 affects Jitsi (version 2.10.5550) with a clickjacking vulnerability in the web UI due to a crafted HTTP request. Several sources (NVD/Red Hat/CVE records, CNNVD, PT-Security) confirm the issue and its presence in 2.10.5550, though the vendor disputes it. Impact is described as enab...
PT-2022-23596 · Jitsi · Jitsi
Name of the Vulnerable Software and Affected Versions: Jitsi version 2.10.5550 Description: The issue allows attackers to perform a clickjacking attack via a crafted HTTP request in the web UI. It is noted that this is disputed by the vendor. Recommendations: For Jitsi version 2.10.5550, as a...
Jitsi 安全漏洞
Jitsi is a free open source audio/video and chat communicator from Jitsi Open Source. A security vulnerability exists in the Jitsi jitsi-2.10.5550 version that stems from the inclusion of an issue in its Web UI that allows an attacker to perform a clickjacking attack via a crafted HTTP request...
PT-2022-6371 · Mitsubishi · Got2000 Series Gt27 +3
Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric Corporation GOT2000 Series GT27 versions 01.14.000 through 01.47.000 Mitsubishi Electric Corporation GOT2000 Series GT25 versions 01.14.000 through 01.47.000 Mitsubishi Electric Corporation GT SoftGOT2000 versions 1.265B...
PT-2022-20882 · Rdiffweb · Rdiffweb
Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.4.1 Description: The issue is related to improper restriction of rendered UI layers or frames, allowing attackers to perform clickjacking attacks. This can trick victims into performing actions such as entering...
UI REDRESSING
Description Clickjacking is a portmanteau of two words ‘click’ and ‘hijacking’. It refers to hijacking user’s click for malicious intent. In it, an attacker embeds the vulnerable site in an transparent iframe in attacker’s own website and overlays it with objects such as button using CSS skills...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Tivoli Netcool/OMNIbus WebGUI (CVE-2021-39038)
Summary Websphere Application Server WAS is shipped as a component of Tivoli Netcool/OMNIbus WebGUI. Information about a security vulnerability affecting WAS has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...
Clickjacking Leads To User Deletion
Hello team, on notrinoserp there is no clickjacking protection implemented x-frame-options, so an attacker can perform clickjacking attack, and in this case im able to delete user account via this vulnerability from the admin account, here is the POC: Exploit Script: iframe position:relative;...
clickjacking attack
Description clickjacking bug.\ I see there is no x-frame-options header set . So, the erp url can be loaded in iframe tag . which allow clickjacking attack Proof of Concept same this bellow code in html file and open this html url is browser . STUDY METERIAL...
CVE-2022-2800
A vulnerability, which was classified as problematic, has been found in SourceCodester Gym Management System. Affected by this issue is some unknown functionality. The manipulation leads to clickjacking. The attack may be launched remotely. The exploit has been disclosed to the public and may be...
CVE-2022-2800 SourceCodester Gym Management System clickjacking
A vulnerability, which was classified as problematic, has been found in SourceCodester Gym Management System. Affected by this issue is some unknown functionality. The manipulation leads to clickjacking. The attack may be launched remotely. The exploit has been disclosed to the public and may be...
CVE-2022-2800 SourceCodester Gym Management System clickjacking
A vulnerability, which was classified as problematic, has been found in SourceCodester Gym Management System. Affected by this issue is some unknown functionality. The manipulation leads to clickjacking. The attack may be launched remotely. The exploit has been disclosed to the public and may be...
CVE-2022-2800
The CVE-2022-2800 entry concerns SourceCodester Gym Management System with a clickjacking vulnerability. Connected documents consistently indicate that manipulation of an unknown function leads to clickjacking, potentially exploitable remotely, and that the exploit has been disclosed publicly (VD...
Gym Management System 安全漏洞
Gym Management System is a gym management system. The system is developed in C and sql server and features customer and vendor management, product management, sales management, gym membership management, fitness assessment, system logging, database backup and restore. A security vulnerability...
UI Redressing
Description Clickjacking is a portmanteau of two words ‘click’ and ‘hijacking’. It refers to hijacking user’s click for malicious intent. In it, an attacker embeds the vulnerable site in an transparent iframe in attacker’s own website and overlays it with objects such as button using CSS skills...
IBM CICS TX Advanced Clickjacking Vulnerability
IBM CICS TX Advanced is a comprehensive, single transaction runtime package from IBM USA. It can provide a cloud-native deployment model for standalone applications. IBM CICS TX Advanced version 11.1 is vulnerable to a clickjacking vulnerability that stems from the program's failure to adequately...
Rockwell Automation MicroLogix Improper Restriction of Rendered UI Layers or Frames (CVE-2022-2179)
The X-Frame-Options header in Rockwell Automation MicroLogix 1100/1400 Versions 21.007 and prior is not configured in the HTTP response, which could allow clickjacking attacks. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. C...
IBM CICS TX 安全漏洞
IBM CICS TX Advanced is a comprehensive, single transaction runtime package from IBM USA. It can provide a cloud-native deployment model for standalone applications. IBM CICS TX Advanced version 11.1 is vulnerable to a clickjacking vulnerability that stems from the program's failure to adequately...
