63 matches found
CVE-2019-6795
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Insufficient Visual Distinction of Homoglyphs Presented to a User. IDN homographs and RTLO characters are rendered to unicode, which could be used for social...
CVE-2019-6795
GitLab Community and Enterprise Edition prior to 11.5.8, prior to 11.6.6 for 11.6.x line, and prior to 11.7.1 for 11.7.x are affected by CVE-2019-6795. The issue is Insufficient Visual Distinction of Homoglyphs Presented to a User: IDN homographs and RTLO characters render to Unicode, enabling so...
CVE-2019-6795
Removed by vendor...
Homoglyphs - Get Similar Letters, Convert To ASCII, Detect Possible Languages And UTF-8 Group
Homoglyphs -- python library for getting homoglyphs and converting to ASCII. Features It's smarter version of confusablehomoglyphs: Autodect or manual choosing category aliases from ISO 15924. Auto or manual load only needed alphabets in memory. Converting to ASCII. More configurable. More stable...
SafeText - Script To Remove Homoglyphs And Zero-Width Characters To Allow For Safe Distribution Of Documents From Anonymous Sources
Tool to sanitize text to allow for safe distribution of documents from anonymous sources by removing zero-width characters and homoglpyhs. Individuals attempting to leak an email or other text file face the risk of identification through fingerprinting. Fingerprinting often occurs when the origin...
CVE-2012-3693
Incomplete blacklist vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to spoof domain names in URLs, and possibly conduct phishing attacks, by leveraging the availability of IDN support and Unicode fonts to construct unspecified homoglyphs...
Design/Logic Flaw
Incomplete blacklist vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to spoof domain names in URLs, and possibly conduct phishing attacks, by leveraging the availability of IDN support and Unicode fonts to construct unspecified homoglyphs...
CVE-2012-3693
CVE-2012-3693 affects WebKit in Safari (iOS/macOS) where IDN/Unicode font look‑alike characters could render a spoofed URL in the address bar, enabling phishing-like deception. Impact is spoofing risk rather than code execution; Apple’s update to Safari 6.0 (and iOS 6) addresses the issue by upda...
CVE-2012-0584
CVE-2012-0584 affects Apple Safari on Windows prior to 5.1.4. The IDN handling in URLs does not properly restrict characters, enabling a remote attacker to spoof a domain name via homoglyphs. The vulnerability is tied to the browser’s internationalized domain name (IDN) feature in Safari, allowin...
CVE-2009-2199
Incomplete blacklist vulnerability in WebKit in Apple Safari before 4.0.3, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to spoof domain names in URLs, and possibly conduct phishing attacks, via unspecified homoglyphs...
Design/Logic Flaw
Incomplete blacklist vulnerability in WebKit in Apple Safari before 4.0.3, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to spoof domain names in URLs, and possibly conduct phishing attacks, via unspecified homoglyphs...
CVE-2009-2199
Removed by vendor...
CVE-2009-2199
CVE-2009-2199 is an incomplete blacklist vulnerability in WebKit used by Apple Safari (and in iPhone OS up to 3.1/3.1.1) that allows remote attackers to spoof domain names in URLs via unspecified homoglyphs, potentially enabling phishing. The affected component is WebKit/Safari prior to version 4...
PT-2009-4648 · Apple · Ios +1
Name of the Vulnerable Software and Affected Versions: Apple Safari versions prior to 4.0.3 iPhone OS versions prior to 3.1 iPhone OS versions prior to 3.1.1 for iPod touch Description: The issue allows remote attackers to spoof domain names in URLs, and possibly conduct phishing attacks, via...
firefox: does not properly prevent the literal rendering of homoglyph characters in IDN domain names (spoof URLs and conduct phishing attacks)
The Internationalized Domain Names IDN blacklist in Mozilla Firefox 3.0.6 and other versions before 3.0.9; Thunderbird before 2.0.0.21; and SeaMonkey before 1.1.15 does not include box-drawing characters, which allows remote attackers to spoof URLs and conduct phishing attacks, as demonstrated by...
firefox: does not properly prevent the literal rendering of homoglyph characters in IDN domain names (spoof URLs and conduct phishing attacks)
The Internationalized Domain Names IDN blacklist in Mozilla Firefox 3.0.6 and other versions before 3.0.9; Thunderbird before 2.0.0.21; and SeaMonkey before 1.1.15 does not include box-drawing characters, which allows remote attackers to spoof URLs and conduct phishing attacks, as demonstrated by...
Mozilla Firefox URL Spoofing And Phising Vulnerability - Linux
Mozilla Firefox is prone to URL spoofing and phising vulnerabilities. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
Firefox URL Spoofing And Phising Vulnerability - Windows
Mozilla Firefox browser is prone to URL spoofing and phising vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Firefox URL Spoofing And Phising Vulnerability (Windows)
The host is installed with Mozilla Firefox browser and is prone to URL spoofing and phising vulnerability. OpenVAS Vulnerability Test $Id: secpodfirefoxurlspoofvulnwin.nasl 5055 2017-01-20 14:08:39Z teissa $ Firefox URL Spoofing And Phising Vulnerability Windows Authors: Nikita MR Copyright:...
Firefox URL Spoofing And Phising Vulnerability (Linux)
The host is installed with Mozilla Firefox browser and is prone to URL spoofing and phising vulnerability. OpenVAS Vulnerability Test $Id: secpodfirefoxurlspoofvulnlin.nasl 5055 2017-01-20 14:08:39Z teissa $ Firefox URL Spoofing And Phising Vulnerability Linux Authors: Nikita MR Copyright:...