Loading vulnerability…
gugoan Economizzer commit 3730880, dated April 2023, and version 0.9-beta1 are susceptible to clickjacking (UI redress). An attacker can use transparent or opaque interface layers to obscure the intended page and cause a victim’s click to be delivered to a button or link on another page.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
If you can’t patch tonight, do this now.
Patch, then assume compromise.
1 valid exploit after Mallory filtered fakes, detection scripts, and README-only repos.
This repository demonstrates a clickjacking vulnerability affecting the G1 news website (https://especiais.g1.globo.com/app-g1/index.html). The repository contains two files: a README.md with a detailed explanation of clickjacking, its risks, and mitigation strategies, and an index.html file that serves as a proof-of-concept exploit. The index.html loads the G1 website in a full-screen iframe and overlays a fake popup after 2 seconds, simulating a social engineering attack that could be used for drive-by downloads or credential theft. The exploit leverages the absence of X-Frame-Options and Content-Security-Policy headers on the target site, allowing it to be embedded in an iframe. The popup includes a download button linking to an external image, but in a real attack, this could be replaced with a malicious payload. The attack vector is browser-based, requiring the victim to visit the attacker's page. The repository is structured as a simple PoC for educational purposes and does not contain weaponized or automated payload delivery.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
Vendor-confirmed product mapping. Mallory continuously reconciles this list against your asset inventory.
No public activity tracked yet. Mallory keeps watching.
No public activity observed for this vulnerability.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.