地图 / 点击劫持点击劫持
UI Redressing (Clickjacking) · 错误配置
错误配置 / 点击劫持
140公开报告
—CWE 编号
0已标注发现方式
140关联报告
发现方式分布
暂无发现方式标注。
关联报告
Cross-site Scripting (XSS) - Stored in RDoc wiki pagesGitLab · 2019-12-16 · 中危 · $3,500 · 282 票Twitter Periscope Clickjacking VulnerabilityX / xAI · 2019-07-10 · 低危 · $1,120 · 144 票Highly wormable clickjacking in player cardX / xAI · 2018-05-17 · 未评级 · 134 票Clickjacking on donation pageWordPress · 2020-07-16 · 低危 · 90 票clickjacing can lead to account takeoverpixiv · 2026-01-18 · 低危 · $200 · 70 票Viral Direct Message Clickjacking via link truncation leading to capture of both Google credentials & installation of malicious 3rd party Twitter AppX / xAI · 2019-10-31 · 中危 · 64 票Sensitive Clickjacking on admin login page.Shipt · — · 未评级 · 55 票Stealing User emails by clickjacking cards.twitter.com/xxx/xxxX / xAI · 2017-02-03 · 低危 · 49 票Clickjacking vkpayVK.com · 2019-12-30 · 低危 · 44 票[api.tumblr.com] Exploiting clickjacking vulnerability to trigger self DOM-based XSSAutomattic · 2020-10-09 · 低危 · 32 票URL is vulnerable to clickjacking https://app.passit.io/Passit · — · 未评级 · 28 票Clickjacking Vulnerability Can Leads To Delete Developer APPTikTok · 2022-05-04 · 低危 · $500 · 27 票Clickjacking at ylands.comBOHEMIA INTERACTIVE a.s. · 2019-03-21 · 低危 · $80 · 22 票Clickjacking in the admin pageRocket.Chat · 2020-01-02 · 低危 · 21 票Clickjacking on cas.acronis.com login pageAcronis · 2020-11-03 · 低危 · 19 票Improper markup sanitization.Automattic · 2017-12-01 · 未评级 · 19 票RTLO char allowed in chatSnapchat · 2017-02-28 · 低危 · 18 票Clickjacking in [exchangemarketplace.com]Shopify · 2019-09-18 · 低危 · 17 票Clickjacking at open.rocket.chatRocket.Chat · 2023-06-15 · 低危 · 16 票Prepopulation of email address and name leaks information provided to other merchantsCoinbase · 2018-04-02 · 未评级 · 16 票Improper markup sanitisation in Simplenote Android application.Automattic · 2018-02-13 · 未评级 · 16 票Clickjacking In jobs.wordpress.netWordPress · 2018-08-22 · 低危 · 16 票Make user buy items via clickjacking possibilityMail.ru · — · 未评级 · 14 票Crafted frame injection leading to form-based UI redressing.Automattic · 2017-12-31 · 未评级 · 14 票Clickjacking wordcamp.orgWordPress · 2017-06-24 · 低危 · 14 票Clickjacking at app.lemlist.comlemlist · 2022-05-20 · 中危 · 13 票Bypass CSP frame-ancestors at olx.co.za, olx.com.ghOLX · — · 未评级 · 13 票Modifying application settings via clickjacking on o2.mail.ruMail.ru · — · 未评级 · $150 · 13 票Modify account details by exploiting clickjacking vulnerability on refer.wordpress.comAutomattic · 2020-02-22 · 低危 · 12 票URL is vulnerable to clickjackingMyCrypto · 2019-10-17 · 低危 · 12 票Clickjacking on https://www.goodhire.com/apiInflection · 2018-05-10 · 低危 · 12 票Following links are vulnerable to clickjackingSemrush · 2018-01-11 · 低危 · 12 票Clickjacking mercantile.wordpress.orgWordPress · 2017-09-08 · 低危 · 12 票Clickjacking on Mixmax.comMixmax · 2017-06-13 · 中危 · 12 票Clickjacking Vulnerability in sifchain.financeSifchain · 2021-05-11 · 未评级 · 11 票Certificate warnings and similar UI elements in Web protection of Anti-Virus products family are susceptible to clickjackingKaspersky · 2019-08-28 · 低危 · 11 票Single Sing On - ClickjackingSemrush · 2018-02-21 · 低危 · 11 票Clickjacking Periscope.tv on ChromeX / xAI · 2017-02-06 · 低危 · $560 · 11 票AWS S3 website can't serve security headers, may allow clickjackingLegal Robot · 2016-09-28 · 未评级 · 11 票Delete images of users with clickjacking in https://pw.mail.ruMail.ru · — · 未评级 · 9 票Bypass of the Clickjacking protection on Flickr using data URL in iframesYahoo! · — · 未评级 · 9 票Clickjacking Vulnerability In Whole Page Ads TiktokTikTok · 2022-07-07 · 低危 · $500 · 8 票Account takeover vulnerability by editor role privileged users/attackers via clickjackingWordPress · 2018-09-03 · 中危 · 8 票Bypassing the Trusted Link Alert SystemVanilla · — · 未评级 · 8 票Clickjacking in Legalrobot appLegal Robot · 2017-11-10 · 未评级 · 8 票Clickjacking - https://mercantile.wordpress.org/WordPress · 2017-08-28 · 低危 · 8 票Clickjacking on authorized page https://wakatime.com/share/embedWakaTime · 2017-07-05 · 低危 · 8 票Gitlab.com is vulnerable to reverse tabnabbing. (#2)GitLab · 2017-05-09 · 低危 · 8 票RTLO character in file namesOpen-Xchange · — · 未评级 · $250 · 8 票Clickjacking to change email addressGener8 · 2022-01-12 · 中危 · 7 票Clickjacking on my.stripo.email for MailChimp credentialsStripo Inc · 2020-01-08 · 低危 · 7 票Click Jacking NextcloudNextcloud · 2019-07-01 · 低危 · 7 票ClickjackingPushwoosh · 2017-02-02 · 低危 · 7 票UI Redressing ( ClickJacking ) Issue on Information submit formLegal Robot · 2016-08-29 · 未评级 · 7 票Registration bypass using OAuth logical bugLegal Robot · 2016-09-06 · 未评级 · 7 票Vulnerable for clickjacking attackSifchain · 2021-05-08 · 低危 · 6 票Clickjacking Vulnerability via https://profile.my.games/gamecenter/profile/ can lead to sensitive cross site actions (Bypass X-Frame-Options)Mail.ru · — · 未评级 · 6 票UI Redressing on Embedded ChartsWakaTime · 2017-07-05 · 低危 · 6 票Found clickjacking vulnerabilityLeaseWeb · 2016-03-23 · 未评级 · 6 票User Impersonation through sendMessage optionsRocket.Chat · 2024-08-10 · 低危 · 5 票Clickjacking Vulnerability via https://www.donationalerts.com/help/support leads to bypass for widget.support.my.games X-Frame OptionsMail.ru · — · 未评级 · 5 票frame injection on bittorrent.comBTFS · 2020-05-05 · 低危 · 5 票ClickjackingKubernetes · 2020-07-23 · 低危 · 5 票UI Redressing (Clickjacking) vulnerabilityNord Security · — · 未评级 · 5 票ClickJacking on IMPORTANT Functions of YelpYelp · 2020-08-21 · 低危 · 5 票clickjacking on https://gratipay.com/on/npm/[text]Gratipay · 2017-09-09 · 未评级 · 5 票https://admin.corp.cuvva.co/ is vulnerable to Clickjacking attacks due to missing X-Frame-OptionsCuvva · — · 未评级 · 5 票RTLO character allowed in shared filesNextcloud · 2020-08-17 · 低危 · 5 票Gitlab.com is vulnerable to reverse tabnabbing via AsciiDoc links. (#3)GitLab · 2017-05-09 · 低危 · 5 票Click JackingLegal Robot · 2016-08-29 · 未评级 · 5 票CJ vulnerability in subdomainDeriv.com · 2016-06-09 · 未评级 · 5 票nginx server vulnerableOpen-Xchange · — · 未评级 · 5 票Missing security headers, possible clickjackingLegal Robot · 2016-09-06 · 未评级 · 5 票ClickJacking on http://au.launch.yahoo.comYahoo! · — · 未评级 · 5 票CLICKJACKING LEADS TO DEACTIVATE ACCOUNTUPchieve · 2021-08-16 · 低危 · 4 票clickjacking on deleting user's clips [https://crossclip.com/clips]Logitech · 2021-11-05 · 低危 · 4 票Clickjacking on profile page leading to unauthorized changesUPchieve · 2021-06-15 · 低危 · 4 票Clickjacking Vulnerability via https://webagent.mail.ru leading to protection bypass for https://web.icq.com/ end pointMail.ru · — · 未评级 · 4 票Clickjacking Full account takeover and editing the personal information at [account.my.com]Mail.ru · — · 未评级 · 4 票Clickjacking In https://demo.nextcloud.comNextcloud · 2017-05-20 · 高危 · 4 票Clickjacking: X-Frame-Options header missingLegal Robot · 2016-08-29 · 未评级 · 4 票Clickjacking login page of http://book.zomato.com/Eternal · 2017-05-18 · 未评级 · 4 票Missing X-Frame-Options headerYelp · 2017-11-09 · 未评级 · 4 票Ошибка фильтрацииMail.ru · — · 未评级 · $500 · 4 票Clickjacking at https://www.mavenlink.com/ main websiteMavenlink · 2014-09-19 · 未评级 · 4 票Clickjacking login page of https://hackers.upchieve.org/loginUPchieve · 2022-03-26 · 低危 · 3 票Clickjacking at sifchain.financeSifchain · 2021-12-09 · 低危 · 3 票Settings page in https://support.my.com is vulnerable to clickjackingMail.ru · — · 未评级 · 3 票Clickjacking: Delete Account, Change privacy settings, Rate business, follow/unfollow (IE)Eternal · 2018-04-15 · 低危 · 3 票Sandboxed iframes don't show confirmation screenCoinbase · 2015-04-04 · 未评级 · 3 票http://us.rd.yahoo.com/Yahoo! · — · 未评级 · 3 票ClickjackingMail.ru · — · 未评级 · 3 票Clickjacking at surveylink.yahoo.comYahoo! · — · 未评级 · 3 票Clickjacking ar https://hackers.upchieve.org/loginUPchieve · 2021-11-19 · 低危 · 2 票clickjacking at brew.shHomebrew · 2021-06-28 · 低危 · 2 票ClickjackingSifchain · 2021-12-09 · 低危 · 2 票ClickJackingAcronis · 2021-03-16 · 中危 · 2 票Site-wide clickjacking at IE11New Relic · — · 未评级 · 2 票Clickjacking in ops.cuvva.comCuvva · — · 未评级 · 2 票Clickjacking Vulnerability on https://support.my.com/games/ticket/xxxx/Mail.ru · — · 未评级 · 2 票查看全部 140 份报告 →