SafeText

SafeText Ferramenta para sanitizar texto, permitindo a distribuição segura de documentos de fontes anônimas, removendo caracteres de largura zero e homoglpyhs. Indivíduos tentando vazar um e-mail ou outro arquivo de texto correm o risco de identificação por meio de impressão digital fingerprintin...

catphish

CATPHISH Genera domini dall'aspetto simile per attacchi di phishing. Controlla i domini scaduti e il loro stato di categorizzazione per eludere la categorizzazione proxy. I domini nella whitelist sono perfetti per i tuoi server C2. Ideale per le attività Red Team. Installazione root@kitploit:...

experiments

Experimentos Repositório de vários experimentos / PoC. debugging-secure-kernel: PoC de depuração com gdb do kernel seguro do Windows 10, sobre QEMU KVM dns: Experimentos sobre DNS / Transparência de Certificados / Homóglifos Attack Surface Reduction: Desmistificando os internals do Windows Attack...

homoglyphs

IL PROGETTO È ARCHIVIATO Fork: https://github.com/orsinium/forks Homoglyphs Homoglyphs -- libreria Python per ottenere omoglifi e convertirli in ASCII. Caratteristiche È una versione più intelligente di confusablehomoglyphs: Rilevamento automatico o scelta manuale della categoria alias da ISO...

catphish

CATPHISH Generate similar-looking domains for phishing attacks. Check expired domains and their categorized domain status to evade proxy categorization. Whitelisted domains are perfect for your C2 servers. Perfect for Red Team engagements. Installation root@kitploit: bundle install Current...

CVE-2026-70470

Flowise CVE-2026-70470: Before version 3.1.3, the validatePythonCodeForDataFrame checker in Flowise allows bypass via Unicode homoglyphs in identifiers, circumventing the ASCII word-boundary blacklist and enabling arbitrary Python execution inside Pyodide with potential full OS command execution ...

EUVD-2026-52811

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise validatePythonCodeForDataFrame in packages/components/src/pythonCodeValidator.ts can be bypassed with Unicode homoglyph identifiers, allowing arbitrary Python execution inside Pyodide...

Incorrect Behavior Order: Validate Before Canonicalize

Overview @auth/core is an Authentication for the Web. Affected versions of this package are vulnerable to Incorrect Behavior Order: Validate Before Canonicalize in the email/magic-link sign-in process. An attacker can gain unauthorized access to a victim's account by submitting an email address...

Incorrect Behavior Order: Validate Before Canonicalize

Overview next-auth is an Authentication for Next.js Affected versions of this package are vulnerable to Incorrect Behavior Order: Validate Before Canonicalize in the email/magic-link sign-in process. An attacker can gain unauthorized access to a victim's account by submitting an email address...

CVE-2022-26843

Insufficient visual distinction of homoglyphs presented to user in the IntelR oneAPI DPC++/C++ Compiler before version 2022.1 for IntelR oneAPI Toolkits before version 2022.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

14 Malicious NuGet Packages Found Stealing Crypto Wallets and Ad Data

ReversingLabs discovers 14 malicious NuGet packages, including Netherеum.All, using homoglyphs and fake downloads to steal crypto wallets and Google Ads data...

CVE-2025-55129

HackerOne community member Kassem S.kassems94 has reported that username handling in Revive Adserver was still vulnerable to impersonation attacks after the fix for CVE-2025-52672, via several alternate techniques. Homoglyphs based impersonation has been independently reported by other HackerOne...

EUVD-2025-200129

HackerOne community member Kassem S.kassems94 has reported that username handling in Revive Adserver was still vulnerable to impersonation attacks after the fix for CVE-2025-52672, via several alternate techniques. Homoglyphs based impersonation has been independently reported by other HackerOne...

EUVD-2019-16353

Malware in sbrugna...

EUVD-2012-0616

Malware in sbrugna...

EUVD-2022-31393

Malicious code in bioql PyPI...

Malicious code in homoglyphs (npm)

The package homoglyphs was found to contain malicious code...

MAL-2025-22519 Malicious code in homoglyphs (npm)

The package homoglyphs was found to contain malicious code...

Mozilla: Bypass of Restricted Keyword "Mozilla" in Display Name Field via Unicode Homoglyphs on addons.allizom.org

A restricted keyword bypass vulnerability was discovered on the Firefox Add-ons platform that allowed an attacker to register a display name visually identical to "Mozilla" by using a Unicode homoglyph character. This circumvented the intended restriction and could have been used to impersonate...

CVE-2019-6795

An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Insufficient Visual Distinction of Homoglyphs Presented to a User. IDN homographs and RTLO characters are rendered to unicode, which could be used for social...