1064 matches found
certstreamcatcher
Certstreamcatcher Catching phishing by observing certificate transparency logs. This tool is based on regex with effective standards for detecting phishing sites in real time using certstream and can also detect punycode IDNA attacks such as https://www.ṁyetḣerwallet.com. Phishing Phishing...
CVE-2022-3602
CVE−2022-3602 What is this? This document and repository is a write-up of CVE−2022-3602, a punycode buffer overflow issue in OpenSSL. It's an "anti-POC" the issue does not appear to exploitable intended for folks who maintain their own OpenSSL builds and for compiler maintainers. There is a...
catphish
CATPHISH Generate similar-looking domains for phishing attacks. Check expired domains and their categorized domain status to evade proxy categorization. Whitelisted domains are perfect for your C2 servers. Perfect for Red Team engagements. Installation bundle install Current Algorithms...
CVE-2017-15394
CVE-2017-15394 A URL spoofing flaw has been found in the extensions UI of the Chromium browser 62.0.3202.62. An IDN homograph attack demo in Chromium through extensions. 1. Load unpacked extension into Chrome 2. View extension details and observe lack of punycode Impact An attacker would leverage...
Addressable display_uri can show misleading hosts with invalid Punycode A-labels
Impact Addressable::IDNA.tounicode, in the pure-Ruby IDNA implementation, decodes Punycode labels labels beginning with xn-- that are not valid A-labels. Those labels are returned in decoded form, when they should be returned unchanged. That includes: - labels that decode to only ASCII characters...
GHSA-9CRM-G4MF-WC5J Addressable display_uri can show misleading hosts with invalid Punycode A-labels
Impact Addressable::IDNA.tounicode, in the pure-Ruby IDNA implementation, decodes Punycode labels labels beginning with xn-- that are not valid A-labels. Those labels are returned in decoded form, when they should be returned unchanged. That includes: - labels that decode to only ASCII characters...
CVE-2026-126349
Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.0.0 until 2.9.1, Addressable::IDNA.tounicode can decode Punycode labels that contain bidirectional controls, zero-width characters, control characters, or other default-ignorable...
CVE-2026-126348
Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.0.0 until 2.9.1, the pure-Ruby Addressable::IDNA.tounicode implementation decodes invalid Punycode A-labels instead of returning them unchanged. Labels that decode to ASCII text ...
CVE-2026-126349
Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.0.0 until 2.9.1, Addressable::IDNA.tounicode can decode Punycode labels that contain bidirectional controls, zero-width characters, control characters, or other default-ignorable...
EUVD-2026-124729
Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.0.0 until 2.9.1, Addressable::IDNA.tounicode can decode Punycode labels that contain bidirectional controls, zero-width characters, control characters, or other default-ignorable...
CVE-2026-126348 Addressable display_uri can show misleading hosts with invalid Punycode A-labels
Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.0.0 until 2.9.1, the pure-Ruby Addressable::IDNA.tounicode implementation decodes invalid Punycode A-labels instead of returning them unchanged. Labels that decode to ASCII text ...
CVE-2026-126348
The Addressable library (versions 2.0.0 to 2.9.1 ) contains a vulnerability in its pure-Ruby Addressable::IDNA.to_unicode implementation. The flaw allows the library to decode invalid Punycode A-labels instead of returning them unchanged. This can result in Addressable::URI#display_uri showing a ...
CVE-2026-126348
Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.0.0 until 2.9.1, the pure-Ruby Addressable::IDNA.tounicode implementation decodes invalid Punycode A-labels instead of returning them unchanged. Labels that decode to ASCII text ...
EUVD-2026-124728
Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.0.0 until 2.9.1, the pure-Ruby Addressable::IDNA.tounicode implementation decodes invalid Punycode A-labels instead of returning them unchanged. Labels that decode to ASCII text ...
CVE-2026-126348 Addressable display_uri can show misleading hosts with invalid Punycode A-labels
Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.0.0 until 2.9.1, the pure-Ruby Addressable::IDNA.tounicode implementation decodes invalid Punycode A-labels instead of returning them unchanged. Labels that decode to ASCII text ...
SpookySSL-Scanner
SpookySSL-Scanner SpookySSL CVE-2022-3602 SSLv3 Scanner for Windows, Linux, macOS Turkish Zafiyet Nasıl Oluşuyor? Öncelikle sorun byte boyutunu belirlerken ortaya çıkıyor. Bayt boyutunu belirlerken farkındaysanız NULL yani boş/sıfır değer tanımlanmamış yani bayt uzunluğu sıfır olarak...
PT-2026-146069
Name of the Vulnerable Software and Affected Versions Addressable versions 2.0.0 through 2.9.0 Description Addressable::IDNA.to unicode decodes Punycode labels containing bidirectional controls, zero-width characters, control characters, or other default-ignorable format characters. Consequently,...
PT-2026-146068
Impact Addressable::IDNA.to unicode, in the pure-Ruby IDNA implementation, decodes Punycode labels labels beginning with xn-- that are not valid A-labels. Those labels are returned in decoded form, when they should be returned unchanged. That includes: - labels that decode to only ASCII character...
CVE-2026-126348: sporkmonger addressable: Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library
Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.0.0 until 2.9.1, the pure-Ruby Addressable::IDNA.tounicode implementation decodes invalid Punycode A-labels instead of returning them unchanged. Labels that decode to ASCII text ...
CVE-2026-126349: sporkmonger addressable: Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library
Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.0.0 until 2.9.1, Addressable::IDNA.tounicode can decode Punycode labels that contain bidirectional controls, zero-width characters, control characters, or other default-ignorable...