opensquat

openSquat Core 📑 Table of Contents What is openSquat? Featured In Open-Core Model Key Features Quick Start Requirements Usage Premium and API Modes MCP Server Configuration Automation CLI Reference Contributing Author License 🎯 What is openSquat? openSquat is an Open Source Intelligence OSINT...

uriDeep

uriDeep Unicode encoding attacks with machine learning. Tool based on machine learning to create amazing fake domains using confusables. Some domains can deceive IDN policies Chrome & Firefox. I created the best big dictionary of confusables using neural networks. It is used in the tool and it ca...

CVE-2017-15394

CVE-2017-15394 A URL spoofing flaw has been found in the extensions UI of the Chromium browser 62.0.3202.62. An IDN homograph attack demo in Chromium through extensions. 1. Load unpacked extension into Chrome 2. View extension details and observe lack of punycode Impact An attacker would leverage...

ditto

Ditto is a small tool that accepts a domain name as input and generates all its variants for an homograph attack as output, checking which ones are available and which are already registered. PoC domains https://tᴡitter.com/ https://clᴏudflare.com Using with Docker The image on docker hub is...

EvilURL

EvilURL v3.0 Generate unicode domains for IDN Homograph Attack and detect them. The EvilURL is released under a BSD-style license. See LICENSE for more details. CLONE git clone https://github.com/UndeadSec/EvilURL.git INSTALL pip install python-nmap python-whois RUNNING cd EvilURL python3...

CVE-2026-87082

A flaw was found in Net::IDN::Punycode. An attacker can provide specially crafted, malformed UTF-8 input to the encodepunycode function. This lack of validation can lead to the application hanging, crashing, or generating an incorrect label, resulting in a Denial of Service DoS or data integrity...

CVE-2026-87081

A flaw was found in Net::IDN::UTS46. A remote attacker could exploit a vulnerability in the 'toascii' function, which performs punycode encoding. By providing a specially crafted, overlong label containing distinct non-ASCII characters, the attacker could trigger a quadratic time complexity issue...

CVE-2026-87079

A flaw was found in Net::IDN::Punycode. An attacker can trigger CPU exhaustion by supplying a long label to the decodepunycode function. This occurs because the function's internal process for inserting decoded characters into a buffer has a quadratic cost relative to the label's length, leading ...

CVE-2026-74766

A flaw was found in Net::IDN::Punycode. A heap use-after-free vulnerability exists in the decodepunycode function when processing a specially crafted punycode label. This occurs because the output buffer is reallocated without updating the insertion pointer, leading to reads and writes to freed...

[SECURITY] Fedora 45 Update: perl-Net-IDN-Encode-2.502-1.fc45

This module provides an easy-to-use interface for encoding and decoding Internationalized Domain Names IDNs...

CLEANSTART-2024-SQ56843 idn in GNU libidn before 1

Security vulnerability affects the libidn package. idn in GNU libidn before 1...

Fedora 45 : perl-Net-IDN-Encode (2026-2aac921262)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2aac921262 advisory. Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encodepunycode. This...

curl: Incomplete IDN hostname check on the transfer path can lead to credential disclosure to an unintended host

Summary The fix that rejects URL-separator characters introduced by IDN decoding hostnamecheck after hostdecode was applied only to the curlurlget getter path. The transfer path still IDN-decodes the URL host with libidn2 and stores the result without any hostnamecheck. Because libidn2 maps U+FF2...

[SECURITY] Fedora 43 Update: perl-Net-IDN-Encode-2.502-1.fc43

This module provides an easy-to-use interface for encoding and decoding Internationalized Domain Names IDNs...

[SECURITY] Fedora 44 Update: perl-Net-IDN-Encode-2.502-1.fc44

This module provides an easy-to-use interface for encoding and decoding Internationalized Domain Names IDNs...

Atlassian Confluence 9.1.x < 9.2.24 / 9.3.x < 10.2.19 / 11.0.0 (CONFSERVER-104501)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104501 advisory. - fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode IDN hostnames for HTTP- family URLs. The IDN conversion path calls a...

Fedora 43 : perl-Net-IDN-Encode (2026-4aec7019eb)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4aec7019eb advisory. Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encodepunycode. This...

Fedora 44 : perl-Net-IDN-Encode (2026-3100f3c686)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3100f3c686 advisory. Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encodepunycode. This...

curl: IDN decoding inserts authority delimiters and can redirect proxy CONNECT to a different host

IDN decoding can insert authority delimiters: CURLUPUNYCODE output does not round-trip and proxy requests carry an ambiguous authority Summary libcurl's IDN decoder accepts a hostname containing U+FF20 FULLWIDTH COMMERCIAL AT ＠. libidn2's TR46 transitional fallback converts it to ASCII @...

Astra Linux – vulnerability in Chromium

Insufficient data validation in URL formatting in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...