SPY-MASKER

SPY-MASKER 🔥 SPY-MASKER フィッシングURLを通常のURL（google.comやfacebook.comなど）の下に隠すためのシンプルなPythonスクリプトです。フィッシングツールに統合して、URLを正規のように見せることができます。 ⚖️ 法的免責事項: 教育目的のみ SPY-MASKERを事前の相互同意なしに標的への攻撃に使用することは違法です。エンドユーザーは、該当するすべての地域、州、連邦の法律を遵守する責任があります。開発者は一切の責任を負わず、このプログラムによって引き起こされた誤用や損害についても責任を負いません。責任を持って使用してください！ 💻...

maskphish

👨‍💻️ 著者 : jaykali 🔥 MaskPhish MaskPhishはフィッシングツールではありません。これは「URL 作成技術」の概念実証にすぎません。これは、フィッシングURLをgoogle.comやfacebook.comのような通常のURLの背後に隠すためのシンプルなBashスクリプトです。適切なクレジットを付ければ、フィッシングツールに統合して、URLを正当に見せることができます。 ⚖️ 法的免責事項： 教育目的のみ...

maskphish

👨‍💻️ Author : jaykali 🔥 MaskPhish MaskPhish is not any Phishing tool. It's just a proof of concept of "URL Making Technology". It is a simple Bash Script to hide phishing URL under a normal looking URL google.com or facebook.com. It can be integrated into Phishing tools with proper credits to look...

Cross-site Scripting (XSS)

Overview distributed is a Distributed scheduler for Dask Affected versions of this package are vulnerable to Cross-site Scripting XSS via the interaction between Jupyter Lab, jupyter-server-proxy, and the Dask dashboard. An attacker can execute arbitrary code by enticing a user to click a phishin...

PYSEC-2026-169

Dask distributed is a distributed task scheduler for Dask. Prior to 2026.1.0, when Jupyter Lab, jupyter-server-proxy, and Dask distributed are all run together, it is possible to craft a URL which will result in code being executed by Jupyter due to a cross-side-scripting XSS bug in the Dask...

UBUNTU-CVE-2026-23528

Dask distributed is a distributed task scheduler for Dask. Prior to 2026.1.0, when Jupyter Lab, jupyter-server-proxy, and Dask distributed are all run together, it is possible to craft a URL which will result in code being executed by Jupyter due to a cross-side-scripting XSS bug in the Dask...

CVE-2026-23528

Dask distributed is a distributed task scheduler for Dask. Prior to 2026.1.0, when Jupyter Lab, jupyter-server-proxy, and Dask distributed are all run together, it is possible to craft a URL which will result in code being executed by Jupyter due to a cross-side-scripting XSS bug in the Dask...

Distributed security vulnerabilities

Distributed is a distributed task scheduler developed by Dask. Versions prior to Distributed 2026.1.0 contained a security vulnerability. This vulnerability stemmed from a cross-site scripting error in the Dask dashboard, which could allow code execution through a phishing URL...

Phishing URL Detection Using Bi-LSTM

Phishing attacks threaten online users, often leading to data breaches, financial losses, and identity theft. Traditional phishing detection systems struggle with high false positive rates and are usually limited by the types of attacks they can identify. This paper proposes a deep learning-based...

A Gradient-Optimized TSK Fuzzy Framework for Explainable Phishing Detection

Phishing attacks represent an increasingly sophisticated and pervasive threat to individuals and organizations, causing significant financial losses, identity theft, and severe damage to institutional reputations. Existing phishing detection methods often struggle to simultaneously achieve high...

DarkGate Malware Activity Spikes as Developer Rents Out Malware to Affiliates

A new malspam campaign has been observed deploying an off-the-shelf malware called DarkGate. "The current spike in DarkGate malware activity is plausible given the fact that the developer of the malware has recently started to rent out the malware to a limited number of affiliates," Telekom...

Scammers send fake 'Energy Bills Support Scheme' texts

Watch out for an energy-themed scam being sent out via SMS. The message plays on energy price fears, similar to what weve seen previously. Scam alert. I just received this text. Click through and it looks very official. Its a scam. The £400 energy bill discount is automatic, you dont need to...

How Instagram scammers talk users out of their accounts

If youve dealt with a scammer, youll know that making up stories is their bread and butter. Think about it: Just when you thought youd heard all the infamous 419 scam backstories, scammers surprise you with a "stuck astronaut" scam, something so utterly hilarious, nonsensical, and otherworldly th...

CVE-2021-25419

Non-compliance of recommended secure coding scheme in Samsung Internet prior to version 14.0.1.62 allows attackers to display fake URL in address bar via phising URL link...

CVE-2021-25419

Non-compliance of recommended secure coding scheme in Samsung Internet prior to version 14.0.1.62 allows attackers to display fake URL in address bar via phising URL link...

Twitter Analytics Open Redirect

================================================================================Twitter Analytics Open Redirect Vulnerability ================================================================================ Credit by Asheesh Anaconda Description An open redirect vulnerability exists in Twitter...

GHSA-95M6-MJH3-58GM Improper Authentication in org.keycloak:keycloak-core

It was found that the keycloak before 2.3.0 did not implement authentication flow correctly. An attacker could use this flaw to construct a phishing URL, from which he could hijack the user's session. This could lead to information disclosure, or permit further possible attacks...

CVE-2016-8609

It was found that the keycloak before 2.3.0 did not implement authentication flow correctly. An attacker could use this flaw to construct a phishing URL, from which he could hijack the user's session. This could lead to information disclosure, or permit further possible attacks...

Authentication flaw

It was found that the keycloak before 2.3.0 did not implement authentication flow correctly. An attacker could use this flaw to construct a phishing URL, from which he could hijack the user's session. This could lead to information disclosure, or permit further possible attacks...

CVE-2016-8609

It was found that the keycloak before 2.3.0 did not implement authentication flow correctly. An attacker could use this flaw to construct a phishing URL, from which he could hijack the user's session. This could lead to information disclosure, or permit further possible attacks...