EUVD-2004-2640

Malware in sbrugna...

New Phishing Scam Uses Google Drawings and WhatsApp Shortened Links

Cybersecurity researchers have discovered a novel phishing campaign that leverages Google Drawings and shortened links generated via WhatsApp to evade detection and trick users into clicking on bogus links designed to steal sensitive information. "The attackers chose a group of the best-known...

Code injection

A "javascript:" url loaded by a malicious page can obfuscate its location by blanking the URL displayed in the addressbar, allowing for an attacker to spoof an existing page without the malicious page's address being displayed correctly. This vulnerability affects Firefox 52...

Security feature bypass

The default configuration of Cisco ASA 5500 Series Adaptive Security Appliance Cisco ASA 7.0, 7.1, 7.2, 8.0, 8.1, and 8.2 allows portal traffic to access arbitrary backend servers, which might allow remote authenticated users to bypass intended access restrictions and access unauthorized web site...

Updated: Google Chrome 0.4.154.25 URI Meta Character URL Obfuscation

Hi All The Google chrome new version 0.4.154.25 is also suffering from this vulnerability.The full POC have been released at milw0rm. Have a look at it: http://milw0rm.com/exploits/7226 The problem is this most of web servers have anti viruses which treated it as URL Spoofing virus. Anyways the P...

CVE-2004-2649

CVE-2004-2649 affects Eudora 6.1.0.6. The issue enables a remote attacker to obfuscate URLs shown in the status bar by inserting a large number of characters (for example spaces encoded as "&#32") in the middle of the URL, potentially misleading users about the actual link. The provided documents...

CVE-2004-2649

Eudora 6.1.0.6 allows remote attackers to obfuscate URLs displayed in the status bar by inserting a large number of characters e.g. spaces coded as "&32" in the middle of the URL...

Eudora Long URL Status Bar Obfuscation

Binary data 1218.prm...

Microsoft Internet Explorer 5/6 / Mozilla 1.2.1 - URI Display Obfuscation (1)

source: https://www.securityfocus.com/bid/9182/info A weakness has been reported in multiple browsers that may allow attackers to obfuscate the URI for a visited page. The problem is said to occur when a URI designed to pass access a specific location with a supplied username, contains a...