BITB

BITB Browser templates for Browser In The Browser BITB attack. More information: https://mrd0x.com/browser-in-the-browser-phishing-attack/ Usage Each folder has a index.html file which has 4 variables that must be modified: XX-TITLE-XX - The title that shows up for the page e.g. Sign in to your...

CVE-2023-4427

CVE-2023-4427 CVE-2023-4427 was found by glazunov, and you can find RCA in his report chrome version: 117.0.5938.62 in linux from v8ctf. I choose a very unstable method. To bypass ASLR, use many iframes with different domains in main.html to brute high address, you can change your /etc/hosts to...

quickjack

Quickjack Quickjack is an intuitive, point-and-click tool for performing advanced and covert clickjacking and frame slicing attacks. Use the Quickjack tool directly at http://samy.pl/quickjack/quickjack.html by @SamyKamkar // [email protected] // http://samy.pl // Dec 22, 2014 Code available...

Thinfinity Iframe Injection

A vulnerability exists in Thinfinity VirtualUI in a function located in /lab.html reachable which by default could allow IFRAME injection via the "vpath" parameter. id: CVE-2021-45092 info: name: Thinfinity Iframe Injection author: danielmofer severity: critical description: A vulnerability exist...

dns-rebind-toolkit

DNS Rebind Toolkit Demo | Security Advisory | Included Payloads | FAQ DISCLAIMER: This software is for educational purposes only. This software should not be used for illegal activity. The author is not responsible for its use. Don't be a dick. DNS Rebind Toolkit is a frontend JavaScript framewor...

CVE-2026-110802

A flaw was found in Altair. The application improperly handles script URLs supplied through URL query parameters in its iframe sandbox, allowing external scripts to be injected into the page without proper sandbox isolation. By convincing a victim to navigate to a specially crafted link, a remote...

CVE-2026-113798

A flaw was found in Electron. When an embedded cross-origin iframe requests pointer lock, the permission handler incorrectly identifies the request as originating from the top-level frame. A remote attacker who supplies untrusted embedded web content can exploit this vulnerability to obtain point...

CVE-2026-110802

The Altair GraphQL client (versions 7.2.4 through 8.5.8 ) is vulnerable to a DOM-based XSS due to improper handling of the plugin_sandbox_opts query string parameter in packages/altair-iframe-sandbox/src/main.ts. An attacker can provide malicious scriptUrls which are passed to injectScript() in p...

CVE-2026-110802 Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox

Altair is a GraphQL client for all platforms. From 7.2.4 until 8.5.8, packages/altair-iframe-sandbox/src/main.ts reads pluginsandboxopts from the iframe-sandbox query string and passes attacker-controlled scriptUrls to injectScript in packages/altair-core/src/utils/inject.ts, which creates script...

CVE-2026-88060

A flaw was found in @angular/platform-server. Untrusted input in server-side rendered SSR templates, specifically within fallback raw-content elements like noscript or iframe, is not properly escaped. This allows a remote attacker to inject malicious code by crafting input that includes unescaped...

webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy

A flaw was found in WebKitGTK. Processing malicious web content can violate the iframe sandboxing policy due to improper validation...

CVE-2026-120987

Whale Browser before 5.39.412.57 allows an attacker to bypass the iframe sandbox in a dual-tab environment...

CVE-2026-120987

Whale Browser before 5.39.412.57 allows an attacker to bypass the iframe sandbox in a dual-tab environment...

CVE-2026-120987

Versions of NAVER Whale Browser prior to 5.39.412.57 are vulnerable to an input validation error (CWE-346) that allows an attacker to bypass the iframe sandbox in a dual-tab environment. While the vulnerability's impact on integrity is noted as high, the documents do not provide specific details ...

EUVD-2026-115692

Whale Browser before 5.39.412.57 allows an attacker to bypass the iframe sandbox in a dual-tab environment...

Malicious code in scdn-jquery (npm)

Version 0.1.6 contains an obfuscated loader in libs/18.2.0.js. When a website serves this file as a browser script, the injected code decodes and loads hxxps://oomcsn.cc/assets/js/m.js. That remote script loads a beacon and inserts an invisible iframe pointing to...

MAL-2026-18455 Malicious code in scdn-jquery (npm)

Version 0.1.6 contains an obfuscated loader in libs/18.2.0.js. When a website serves this file as a browser script, the injected code decodes and loads hxxps://oomcsn.cc/assets/js/m.js. That remote script loads a beacon and inserts an invisible iframe pointing to...

Malicious code in scdn-jquery (npm)

Version 0.1.6 contains an obfuscated loader in libs/18.2.0.js. When a website serves this file as a browser script, the injected code decodes and loads https://oomcsn.cc/assets/js/m.js. That remote script loads a beacon and inserts an invisible iframe pointing to...

webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy

A flaw was found in WebKitGTK. Processing malicious web content can violate the iframe sandboxing policy due to improper validation...

CVE-2012-2593

Atmail XSS-CSRF-RCE Exploit Chain PoC atmail-rce.py: Exploits CVE-2012-2593 in Atmail's webmail interface. atmail-csrf.js: Javascript file which leverages CVE 2012-2593 into a CSRF to install a malicious plugin which executes a reverse shell Plugin.php: Atmail plugin to be installed which calls a...