Open github-actions[bot] opened 1 year ago
Clickjacking, which is also called UI redressing, is a trick which places an invisible panel or an identical control overlay in front of an existing application. The user clicking on that control or page is then used to perform some other action on behalf of that user i.e. Liking a social media page or posting a tweet. The click is then also passed on to the underlying application and the user is unaware that their identity has been misused.
Session-related but not session-based, this attack is based on the ability of an attacker to force an action on a user’s browser (commonly in the form of a POST request) to perform an unauthorized action on behalf of the user. This can often occur without the user even noticing it… or only noticing when it is too late. The root cause is that browsers automatically send session cookies with all requests to a given domain, regardless of where the source of the request came from, and the application server cannot differentiate between a request that came from pages it served or a request that came from an unrelated page.
Many web applications and APIs do not properly protect sensitive data, such as financial, healthcare, and PII. Attackers may steal or modify such weakly protected data to conduct credit card fraud, identity theft, or other crimes. Sensitive data may be compromised without extra protection, such as encryption at rest or in transit, and requires special precautions when exchanged with the browser. Source: https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project
Site: http://souradipghosh.in New Alerts
Information Disclosure - Suspicious Comments [10027] total: 2:
Resolved Alerts
View the following link to download the report. RunnerID:4988914178
View the following link to download the report. RunnerID:5239783742
Site: //souradipghosh.in
Site: http://souradipghosh.in New Alerts
View the following link to download the report. RunnerID:4651651322