CVE-2020-15215-Discord-POC

Discord Electron ISO 边界验证概念验证 范围 本仓库是一个概念验证测试平台，用于 Discord 风格桌面架构中的 Electron 边界加固。它模拟了渲染进程/主进程分离、预加载桥接策略、IPC 通道暴露、导航控制以及运行时监管，以研究错误配置如何削弱应用程序的隔离保障。 相关参考案例详情追踪于： https://bugbounty.com/211356433 漏洞背景 案例研究基于 2020 年 Discord 桌面应用漏洞链，涉及 Electron CVE-2020-15215（上下文隔离绕过）和...

CVE-2026-74978

Clickjacking issue in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

PT-2023-26652 · Unknown · Gugoan Economizzer

Name of the Vulnerable Software and Affected Versions: gugoan Economizzer version 0.9-beta1 gugoan Economizzer commit 3730880 April 2023 Description: The issue is related to Clickjacking, also known as a "UI redress attack", where an attacker uses multiple transparent or opaque layers to trick a...

UI REDRESSING

Description The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain, which can lead to user confusion about which interface the user is interacting with Steps To Reproduce 1. Create a New HTML file as shown in below i....

Adobe Flash bug allow spying Webcam hole

Adobe Flash bug allow spying Webcam hole The flaw was disclosed in 2008 and can be exploited to turn on people's webcams or microphones without their knowledge. Attack involved putting the Adobe Flash Settings Manager page into an iFrame and masking it with a game, so that when the user clicked o...