Lucene search
+L

702 matches found

Kitploit
Kitploit
added 2026/09/14 2:31 a.m.24 views

catphish

CATPHISH Generate similar-looking domains for phishing attacks. Check expired domains and their categorized domain status to evade proxy categorization. Whitelisted domains are perfect for your C2 servers. Perfect for Red Team engagements. Installation root@kitploit: bundle install Current...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 10:40 p.m.5 views

certstreamcatcher

Certstreamcatcher Catching phishing by observing certificate transparency logs. This tool is based on regex with effective standards for detecting phishing sites in real time using certstream and can also detect punycode IDNA attacks such as https://www.ṁyetḣerwallet.com. Phishing Phishing...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 10:43 a.m.3 views

CVE-2022-3602

CVE−2022-3602 What is this? This document and repository is a write-up of CVE−2022-3602, a punycode buffer overflow issue in OpenSSL. It's an "anti-POC" the issue does not appear to exploitable intended for folks who maintain their own OpenSSL builds and for compiler maintainers. There is a...

7.5CVSS7.8AI score0.92488EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/13 5:49 a.m.4 views

SpookySSL-Scanner

SpookySSL-Scanner SpookySSL CVE-2022-3602 SSLv3 Scanner for Windows, Linux, macOS Turkish Zafiyet Nasıl Oluşuyor? Öncelikle sorun byte boyutunu belirlerken ortaya çıkıyor. Bayt boyutunu belirlerken farkındaysanız NULL yani boş/sıfır değer tanımlanmamış yani bayt uzunluğu sıfır olarak...

7.5CVSS7.7AI score0.9077EPSS
SaveExploits6References1
Kitploit
Kitploit
added 2026/09/13 5:08 a.m.11 views

catphish

CATPHISH 生成用于钓鱼攻击的相似域名。检查过期域名及其分类状态以规避代理分类。白名单域名非常适合您的C2服务器。完美适用于红队演练。 安装 root@kitploit: bundle install 当前算法 SingularOrPluralise prependOrAppend doubleExtensions mirrorization homoglyphs dashOmission Punycode 版本 1.1.0: root@kitploit: The parser for command line options is modified to compensate...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 5:20 p.m.10 views

CVE-2017-15394

CVE-2017-15394 Se ha encontrado una falla de suplantación de URL en la interfaz de extensiones del navegador Chromium 62.0.3202.62. Una demostración de un ataque homógrafo IDN en Chromium a través de extensiones. 1. Carga la extensión sin empaquetar en Chrome 2. Consulta los detalles de la...

6.5CVSS7.2AI score0.0188EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/09/11 7:06 a.m.8 views

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

9.6CVSS5.8AI score0.00692EPSS
SaveExploits0References8
OSV
OSV
added 2026/09/10 2:09 a.m.5 views

CLEANSTART-2026-HR50080 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

Multiple security vulnerabilities affect the cert-manager package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...

9.8CVSS5.8AI score0.07314EPSS
SaveExploits2References103
OSV
OSV
added 2026/09/10 1:15 a.m.4 views

CLEANSTART-2026-SS34822 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

Multiple security vulnerabilities affect the metallb package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...

9.8CVSS5.8AI score0.00692EPSS
SaveExploits0References25
OSV
OSV
added 2026/09/10 1:06 a.m.6 views

CLEANSTART-2026-QK89502 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

Multiple security vulnerabilities affect the vault-k8s package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...

9.8CVSS5.8AI score0.07314EPSS
SaveExploits2References106
OSV
OSV
added 2026/09/10 12:50 a.m.5 views

CLEANSTART-2026-CT24188 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

Multiple security vulnerabilities affect the rabbitmq-cluster-operator package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...

9.8CVSS5.8AI score0.00692EPSS
SaveExploits0References29
OSV
OSV
added 2026/09/10 12:45 a.m.6 views

CLEANSTART-2026-XP64749 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

Multiple security vulnerabilities affect the rabbitmq-cluster-operator package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...

9.8CVSS5.8AI score0.00692EPSS
SaveExploits0References27
RedHat Linux
RedHat Linux
added 2026/09/09 4:12 p.m.7 views

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

9.6CVSS5.8AI score0.00692EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/09/09 11:17 a.m.8 views

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

9.6CVSS5.8AI score0.00692EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.8 views

openSUSE 16 Security Update : perl-URI (openSUSE-SU-2026:21773-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21773-1 advisory. This update for perl-URI fixes the following issue: - CVE-2026-19953: non-NFC host names encoded to non-standard punycode labels due to missing...

6.5CVSS0.00373EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/09/08 9:33 p.m.8 views

Nodemailer: IDN/Punycode domain allow-list bypass leads to email delivery to an attacker-controlled domain

Summary Nodemailer resolves an international IDN / non-ASCII recipient domain to a different Punycode xn-- label than every UTS‑46‑conformant parser web browsers, the WHATWG URL Standard, Node's url.domainToASCII, Python's idna. Its address normalizer normalizeAddress in lib/mime-node/index.js us...

5.8AI score
SaveExploits0References6Affected Software1
RedHat Linux
RedHat Linux
added 2026/09/08 6:13 p.m.6 views

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

9.6CVSS5.8AI score0.00692EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/09/08 12:18 p.m.5 views

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

9.6CVSS5.8AI score0.00692EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/09/08 12:08 p.m.7 views

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

9.6CVSS5.8AI score0.00692EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/09/03 9:30 a.m.12 views

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

9.6CVSS6.3AI score0.00692EPSS
SaveExploits0References8
Rows per page
Query Builder