106 matches found
CVE-2021-25262
Yandex Browser for Android prior to version 21.3.0 contains a vulnerability (CVE-2021-25262) that enables an IDN homograph attack via remote access. The issue affects Yandex Browser for Android; root cause is unspecified in the provided documents beyond the IDN spoofing concept. The consequence i...
CVE-2025-27611 base-x homograph attack allows Unicode lookalike characters to bypass validation.
base-x is a base encoder and decoder of any given alphabet using bitcoin style leading zero compression. Versions 4.0.0, 5.0.0, and all prior to 3.0.11, are vulnerable to attackers potentially deceiving users into sending funds to an unintended address. This issue has been patched in versions...
CVE-2025-27611 base-x homograph attack allows Unicode lookalike characters to bypass validation.
base-x is a base encoder and decoder of any given alphabet using bitcoin style leading zero compression. Versions 4.0.0, 5.0.0, and all prior to 3.0.11, are vulnerable to attackers potentially deceiving users into sending funds to an unintended address. This issue has been patched in versions...
CVE-2025-27611 base-x homograph attack allows Unicode lookalike characters to bypass validation.
base-x is a base encoder and decoder of any given alphabet using bitcoin style leading zero compression. Versions 4.0.0, 5.0.0, and all prior to 3.0.11, are vulnerable to attackers potentially deceiving users into sending funds to an unintended address. This issue has been patched in versions...
GHSA-XQ7P-G2VC-G82P Homograph attack allows Unicode lookalike characters to bypass validation.
Impact Attackers can deceive users into sending funds to an unintended address. Patches https://github.com/cryptocoinjs/base-x/pull/86...
Homograph attack allows Unicode lookalike characters to bypass validation.
Impact Attackers can deceive users into sending funds to an unintended address. Patches https://github.com/cryptocoinjs/base-x/pull/86...
SUSE CVE-2020-6401
Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...
Brave Software: Brave Shield for iOS is weak against IDN homograph attacks
A vulnerability was found in Brave Shield for iOS, where it was weak against IDN homograph attacks. This allowed attackers to deceive users into believing that a site is legitimate by showing a different domain name in the Brave Shield panel. The vulnerability affected Brave for iOS version 1.45....
CVE-2022-47524
F-Secure SAFE Browser 19.1 before 19.2 for Android allows an IDN homograph attack...
Authentication flaw
F-Secure SAFE Browser 19.1 before 19.2 for Android allows an IDN homograph attack...
CVE-2022-47524
F-Secure SAFE Browser 19.1 before 19.2 for Android allows an IDN homograph attack...
PT-2022-28071 · F Secure · F-Secure Safe Browser
Name of the Vulnerable Software and Affected Versions: F-Secure SAFE Browser versions 19.1 through 19.1 Description: The issue allows an IDN homograph attack. This type of attack involves using similar-looking characters from different alphabets to create fake domain names that appear legitimate,...
CVE-2022-47524
F-Secure SAFE Browser 19.1 before 19.2 for Android allows an IDN homograph attack...
CVE-2022-47524
CVE-2022-47524 affects F-Secure SAFE Browser on Android (version 19.1 prior to 19.2). The issue is an IDN homograph attack that could enable spoofing of legitimate domains. Root cause is the handling of Internationalized Domain Names allowing homogeneous-looking characters to pass validation, ena...
Keycloak is vulnerable to IDN homograph attack
A flaw was found in keycloak, where IDN homograph attacks are possible. This flaw allows a malicious user to register a name that already exists and then tricking an admin to grant extra privileges. The highest threat from this vulnerability is to integrity...
GHSA-PF38-CW3P-22Q9 Keycloak is vulnerable to IDN homograph attack
A flaw was found in keycloak as shipped in Red Hat Single Sign-On 7.4 where IDN homograph attacks are possible. A malicious user can register himself with a name already registered and trick admin to grant him extra privileges...
Beware of this bogus (and phishy) “Instagram Support” email
Recently, a fake Instagram email successfully bypassed Googles email filters and made it into hundreds of employee inboxes used by a prominent US life insurance company based in New York. This was revealed in a report by Armorblox, a cybersecurity company specializing in stopping business email...
Vanilla: Homograph attack bypass cause redirection
Hi Team, I read the report 563268 which is a great report that was able to trick users to click on links which appears to them normal links but in fact its malicious links So I tried to find a way to make this happen again and I found out that there is a Homograph attack bypass which can redirect...
CVE-2021-3424
A flaw was found in keycloak as shipped in Red Hat Single Sign-On 7.4 where IDN homograph attacks are possible. A malicious user can register himself with a name already registered and trick admin to grant him extra privileges...
