CVE-2019-9673

CVE-2019-9673: Freenet content filter vulnerability NOTE: I have fully disclosed this bug to the Freenet team and worked with them to verify their patch. The patch is now deployed in the latest version of Freenet. I've recently found a security vulnerability in Freenet that may allow an attacker ...

GLSA-202608-33 : Freenet: Deanonymization Vulnerability

The remote host is affected by the vulnerability described in GLSA-202608-33 Freenet: Deanonymization Vulnerability A vulnerability has been discovered in Freenet. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from th...

Freenet: Deanonymization Vulnerability

Background Freenet is an encrypted network without censorship. Description A vulnerability has been discovered in Freenet. Please review the CVE identifier referenced below for details. Impact This release fixes as an XSS vulnerability that may allow an attacker to deanonymize the user. Workaroun...

Behavioral Information Leakage in Darknet Traffic: A Multi-Channel Analysis across Anonymity Networks

Existing darknet traffic classification studies largely emphasize predictive accuracy while offering limited insight into the behavioral mechanisms that make encrypted services distinguishable. This paper proposes a behavioral information leakage framework that decomposes flow-level traffic into...

CVE-2019-9673

Freenet 1483 has a MIME type bypass that allows arbitrary JavaScript execution via a crafted Freenet URI...

Freenet: Deanonymization Vulnerability

Background Freenet is an encrypted network without censorship. Description This release fixes a severe vulnerability in path folding that allowed to distinguish between downloaders and forwarders with an adapted node that is directly connected via opennet. Impact This release fixes a severe...

GLSA-202407-28 : Freenet: Deanonymization Vulnerability

The remote host is affected by the vulnerability described in GLSA-202407-28 Freenet: Deanonymization Vulnerability This release fixes a severe vulnerability in path folding that allowed to distinguish between downloaders and forwarders with an adapted node that is directly connected via opennet...

bos-auto (>=0.4.3, <=0.4.9), freenet-funk-api (>=0.1.0, <=0.1.4) +6 more potentially affected by CVE-2024-23342 via ecdsa (0.13.2)

ecdsa PYPI version 0.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on ecdsa and may be impacted: - bos-auto =0.4.3, =0.1.0, =1.1.18, =0.3.12, =0.4.0 Source cves: CVE-2024-23342 Source advisory: OSV:GHSA-WJ6H-64FC-37MP...

What is the dark web?

Most users interact with the internet through the web, and many of the threat actors we write about operate on the "dark web." Broadly speaking, the dark web is a small portion of the "deep web," where the deep web represents most of the Web. We know, its confusing -- lets walk through an example...

CVE-2019-9673

Freenet 1483 has a MIME type bypass that allows arbitrary JavaScript execution via a crafted Freenet URI...

CVE-2019-9673

Freenet 1483 has a MIME type bypass that allows arbitrary JavaScript execution via a crafted Freenet URI...

Design/Logic Flaw

Freenet 1483 has a MIME type bypass that allows arbitrary JavaScript execution via a crafted Freenet URI...

CVE-2019-9673

Freenet 1483 has a MIME type bypass that allows arbitrary JavaScript execution via a crafted Freenet URI...

CVE-2019-9673

Freenet 1483 has a MIME type bypass that allows arbitrary JavaScript execution via a crafted Freenet URI...

CVE-2019-9673

Freenet 1483 is affected by a MIME-type bypass that allows arbitrary JavaScript execution via a crafted Freenet URI. The root cause is improper MIME-type handling, enabling code execution without user interaction. NVD lists CVSS v2 base score 6.8 (Network, Medium complexity) and CVSS v3 base scor...

CVE-2019-9673: Undefined Security Weakness

Freenet 1483 has a MIME type bypass that allows arbitrary JavaScript execution via a crafted Freenet URI...

PT-2019-19789

Name of the Vulnerable Software and Affected Versions Freenet version 1483 Description The issue allows for arbitrary JavaScript execution via a crafted Freenet URI, due to a MIME type bypass. Recommendations For version 1483, update to a newer version that contains a fix for this issue, if...

Freenet SMS Service - Persistent Web Vulnerability

Document Title: =============== Freenet SMS Service - Persistent Web Vulnerability Release Date: ============= 2011-08-02 Vulnerability Laboratory ID VL-ID: ==================================== 123 Abstract Advisory Information: ============================== An anonymous laboratory researcher...

Freenet SMS Service - Persistent Web Vulnerability

Document Title: =============== Freenet SMS Service - Persistent Web Vulnerability Release Date: ============= 2011-08-02 Vulnerability Laboratory ID VL-ID: ==================================== 123 Abstract Advisory Information: ============================== An anonymous laboratory researcher...