recaptcha-phish

reCAPTCHA Phish John Hammond | 2024年9月13日 这是一个小型测试工具，用于重现 2024 年 8 月/9 月左右在野外出现的社交工程和网络钓鱼诱饵。 🪝 野外诱饵 最初以 “验证您是人类” 的外衣出现，攻击向量是 复制粘贴 。 它直接指示用户使用热键 Win+R 打开 Windows 运行对话框，并让他们用 Ctrl+V 粘贴浏览器已预先复制到剪贴板中的恶意命令。 尽管这…… 愚蠢 ……但确实可能有效。😅 在 Twitter 上的一些讨论之后，这些显然被称为 "ClickFix" 或 Emmenhtal，用于 Unit42、Orange...

CVE-2020-37107

Core FTP LE 2.2 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the account field with a large buffer. Attackers can create a text file with 20,000 repeated characters and paste it into the account field to cause the application to become...

CVE-2024-10465

A clipboard "paste" button could persist across tabs which allowed a spoofing attack. This vulnerability affects Firefox 132, Firefox ESR 128.4, Thunderbird 128.4, and Thunderbird 132...

DEBIAN-CVE-2020-15676

Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaScript being executed after pasting attacker-controlled data into a contenteditable element. This vulnerability affects Firefox 81, Thunderbird 78.3, and Firefox ESR 78.3...

UBUNTU-CVE-2019-1010091

tinymce 4.7.11, 4.7.12 is affected by: CWE-79: Improper Neutralization of Input During Web Page Generation. The impact is: JavaScript code execution. The component is: Media element. The attack vector is: The victim must paste malicious content to media element's embed tab...

DSA-273 krb4 - Cryptographic weakness

Bulletin has no description...

CVE-2003-0139

Certain weaknesses in the implementation of version 4 of the Kerberos protocol krb4 in the krb5 distribution, when triple-DES keys are used to key krb4 services, allow an attacker to create krb4 tickets for unauthorized principals using a cut-and-paste attack and "ticket splicing."...

CVE-2002-1747

Vtun 2.5b1 does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on ECB...