Lucene search
+L

106 matches found

Hacker One
Hacker One
added 2014/11/22 10:43 a.m.19 views

X (Formerly Twitter): Homograph attack.

In the report 31193 cmiller said "Twitter does warn if the user tries to visit a malicious URL while passing through our t.co URL shortening service. Thanks!" URL redirection warning not given for punny code URL. ATTACK: I mainly envision using this as an attack against admins of programs that us...

7AI score
SaveExploits0
Hacker One
Hacker One
added 2014/09/30 6:51 p.m.94 views

HackerOne: homograph attack. IDNs displayed in unicode in bug reports and on external link warning page

the IDN: http://ebаy.com/ is a homograph for the latin ebay.com. if you click that first link, youm might think that you are going to ebay.com. in fact, you are going to a homograph url http://xn--eby-7cd.com/ more info http://www.chromium.org/developers/design-documents/idn-in-google-chrome more...

1.1AI score
SaveExploits0
NVD
NVD
added 2009/02/20 7:30 p.m.21 views

CVE-2009-0652

The Internationalized Domain Names IDN blacklist in Mozilla Firefox 3.0.6 and other versions before 3.0.9; Thunderbird before 2.0.0.21; and SeaMonkey before 1.1.15 does not include box-drawing characters, which allows remote attackers to spoof URLs and conduct phishing attacks, as demonstrated by...

5.8CVSS6.4AI score0.01497EPSS
SaveExploits0References23
Tenable Nessus
Tenable Nessus
added 2005/07/20 12:00 a.m.30 views

SUSE-SA:2005:031: opera

The remote host is missing the patch for the advisory SUSE-SA:2005:031 opera. The commercial web browser Opera has been updated to the 8.0 version, fixing all currently known security problems, including: - CVE-2005-0235: IDN cloaking / homograph attack allows easy spoofing of domain names. -...

7.5CVSS5.3AI score0.03403EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2005/03/17 12:00 a.m.39 views

Mandrake Linux Security Advisory : kdelibs (MDKSA-2005:058)

A vulnerability in dcopserver was discovered by Sebastian Krahmer of the SUSE security team. A local user can lock up the dcopserver of other users on the same machine by stalling the DCOP authentication process, causing a local Denial of Service. dcopserver is the KDE Desktop Communication...

7.5CVSS5.5AI score0.20398EPSS
SaveExploits2References7
securityvulns
securityvulns
added 2005/03/17 12:00 a.m.60 views

Multiple KDE Security Advisories (2005-03-16)

Three KDE security advisories have been issued today. KDE Security Advisory: Local DCOP denial of service vulnerability Original Release Date: 20050316 URL: http://www.kde.org/info/security/advisory-20050316-1.txt 0. References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0396 1. System...

5CVSS6.3AI score0.01634EPSS
SaveExploits1
Rows per page
Query Builder