Tor-0day-JavaScript-Exploit

CVE-2024-9680 - Tor浏览器 0day漏洞利用 动画时间线中的UAF（释放后使用）— 远程代码执行漏洞 在野攻击中被积极利用，针对Tor浏览器用户 查看分析 • 官方CVE 概述 本仓库包含对CVE-2024-9680的全面分析和教育演示。该漏洞是Firefox动画时间线管理中的一个严重UAF（释放后使用）漏洞，可在浏览器内容进程中实现远程代码执行。 受影响版本 Firefox 131.0.2 Firefox ESR 128.3.1, 115.16.1 Thunderbird 131.0.1, 128.3.1, 115.16.0 补丁状态 补丁已应用：2024年11月5日...

CryKeX

Properties: Cross-platform Minimalism Simplicity Interactivity Compatibility/Portability Application Independable Process Wrapping Process Injection Dependencies: Unix - should work on any Unix-based OS BASH - the whole script root privileges optional Limitations: AES and RSA keys only Fails most...

sniffly

Sniffly2 Sniffly2 is a variant of Sniffly which abuses HTTP Strict Transport Security headers and the Performance Timing API in order to sniff your browsing history in Chromium-based browsers. Demo Visit http://diracdeltas.github.io/sniffly in Chrome/Chromium/Brave/etc. with HTTPS Everywhere...

CVE-2021-46702

CVE-2021-46702 描述： Windows 10 build 10586 上的 Tor 浏览器 9.0.7 存在信息泄露漏洞。这可能允许本地攻击者绕过预期的匿名功能，并获取有关本地用户访问过的洋葱服务的信息。即使在本地用户使用该产品数小时后，也可以通过分析 RAM 内存来实现这一点。发生这种情况是因为该产品未能正确释放内存。 测试版本： Tor 浏览器 - 9.0.7 产品供应商 https://www.torproject.org/ 攻击类型 本地 影响 信息泄露 参考...

GHSA-XPMJ-WJCP-6PWW

creationtimestamp| type| source ---|---|--- 2026-08-19 09:32:00+00:00| seen| https://gist.github.com/alon710/f8eaee2020ed8f819add6f9d1de77bf8...

CVE-2026-44597

Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a reason in its payload, aka TROVE-2026-011...

CVE-2019-12383

Tor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to detect the browser's UI locale by measuring a button width, even if the user has a "Don't send my language" setting...

[SECURITY] Fedora 43 Update: torbrowser-launcher-0.3.9-2.fc43

Tor Browser Launcher is intended to make Tor Browser easier to install and use for GNU/Linux users. You install torbrowser-launcher from your distribution's package manager and it handles everything else: Downloads and installs the most recent version of Tor Browser in your langu age and for your...

EUVD-2019-4018

Malware in sbrugna...

EUVD-2016-4221

Malware in sbrugna...

EUVD-2021-25608

Malware in sbrugna...

EUVD-2014-5638

Malware in sbrugna...

EUVD-2017-7734

Malware in sbrugna...

EUVD-2017-7826

Malware in sbrugna...

EUVD-2019-4626

Malware in sbrugna...

EUVD-2018-8768

Malware in sbrugna...

EUVD-2021-33362

Malicious code in bioql PyPI...

Mozilla Patches Critical Firefox Bug Similar to Chrome's Recent Zero-Day Vulnerability

Mozilla has released updates to address a critical security flaw impacting its Firefox browser for Windows, merely days after Google patched a similar flaw in Chrome that came under active exploitation as a zero-day. The security vulnerability, CVE-2025-2857, has been described as a case of an...

Linux Distros Unpatched Vulnerability : CVE-2019-12383

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to detect the browser's UI locale by measuring a button width, ev...

A week in security (October 14 – October 20)

Last week on Malwarebytes Labs: Unauthorized data access vulnerability in macOS is detailed by Microsoft 23andMe will retain your genetic information, even if you delete the account "Nudify" deepfake bots remove clothes from victims in minutes, and millions are using them Tor Browser and Firefox...