duplicut

Duplicut :scissors: Quickly dedupe massive wordlists, without changing the order Created by nil0x42 and contributors 📖 Overview Nowadays, password wordlist creation usually implies concatenating multiple data sources. Ideally, most probable passwords should stand at start of the wordlist, so most...

CVE-2026-10050 Digest authentication lossy encoding

In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for historical reasons. If the password contains...

URL Spoofing vulnerabilities in browsers and search engines

Hello 3APA3A! I continue the topic, which I begun in previous two advisories about URL Spoofing vulnerability http://websecurity.com.ua/3079/ in GoogleBot, Yahoo! Slurp, Mozilla and Internet Explorer http://websecurity.com.ua/3096/, which also can exists in bots of other search engines. And I tel...