CVE-2026-87724

Tor before 0.4.9.12 interprets the CCRESPONSE extension even when CCREQUEST was not sent, which allows remote attackers to cause a denial of service crash because of corrupted congestion-control state. This is TROVE-2026-032...

CVE-2026-87724

Tor versions prior to 0.4.9.12 are affected by a denial-of-service vulnerability (TROVE-2026-032) in the congestion-control mechanism. The underlying cause is that Tor interprets the CC_RESPONSE extension even when CC_REQUEST was never sent, leading to a corrupted congestion-control state and an ...

EUVD-2026-74539

Tor before 0.4.9.12 interprets the CCRESPONSE extension even when CCREQUEST was not sent, which allows remote attackers to cause a denial of service crash because of corrupted congestion-control state. This is TROVE-2026-032...

CVE-2026-87724

Tor before 0.4.9.12 interprets the CCRESPONSE extension even when CCREQUEST was not sent, which allows remote attackers to cause a denial of service crash because of corrupted congestion-control state. This is TROVE-2026-032...

CVE-2026-87724

Tor before 0.4.9.12 interprets the CCRESPONSE extension even when CCREQUEST was not sent, which allows remote attackers to cause a denial of service crash because of corrupted congestion-control state. This is TROVE-2026-032...

CVE-2026-87724: Incorrect Resource Transfer Between Spheres

Tor before 0.4.9.12 interprets the CCRESPONSE extension even when CCREQUEST was not sent, which allows remote attackers to cause a denial of service crash because of corrupted congestion-control state. This is TROVE-2026-032...

Linux Distros Unpatched Vulnerability : CVE-2026-87724

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tor before 0.4.9.12 interprets the CCRESPONSE extension even when CCREQUEST was not sent, which allows remote attackers to cause a denial of service crash becau...

PT-2026-88760

Name of the Vulnerable Software and Affected Versions Tor versions prior to 0.4.9.12 Description The software incorrectly interprets the CC RESPONSE extension even when a CC REQUEST was not previously sent. This behavior allows remote attackers to corrupt the congestion-control state, leading to ...

MGASA-2026-0382 Updated tor packages fix security vulnerabilities

An out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type CVE-2026-77642. A NULL write after free when sending a CONFLUXSWITCH cell fails, resulting in a crash CVE-2026-77641. An infinite loop when decompressing a truncated zlib/gzip stream with...

Updated tor packages fix security vulnerabilities

An out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type CVE-2026-77642. A NULL write after free when sending a CONFLUXSWITCH cell fails, resulting in a crash CVE-2026-77641. An infinite loop when decompressing a truncated zlib/gzip stream with...

ShadowNet v11.1.0

Big Thanks to Jesus for making this gain attention! Turn to Jesus before it's too late. : He loves You To even further enhance your privacy and security; Use ShadowNet on your Host OS & Run Whonix in a VM to browse the web. Or you can use GhostBox. Sandboxing tool released by Anti Surveillance...

INSTA_CYBER

Instagram-Hacker This is a script for Instagram bruteforce attacks. WARNING THIS IS A REAL TOOL! 🌐 Instagram-Hacker 🔐 A Bruteforce Attack Script for Educational & Ethical Hacking Purposes Only ⚠️ DISCLAIMER 🚨 This tool is for educational and ethical testing purposes ONLY. The misuse of this script...

terminalphone — Updated!

TerminalPhone Encrypted push-to-talk voice communication over Tor hidden services. TerminalPhone is a single, self-contained Bash script that provides anonymous, end-to-end encrypted voice and text communication between two or more parties over the Tor network. It operates as a walkie-talkie: you...

OnionBrowser v3.4.1

Onion Browser Official Site | Support | Release History | Donate © 2012-2024, Tigas Ventures, LLC Mike Tigas This is the Onion Browser3.X branch. The older versions of Onion Browser can be found here and here. Onion Browser is a free web browser for iPhone and iPad that encrypts and tunnels web...

Security update for tor (important)

openSUSE Security Update: Security update for tor Announcement ID: openSUSE-SU-2026:0306-1 Rating: important References: 1275918 1275919 1275920 Cross-References: CVE-2026-77584 CVE-2026-77587 CVE-2026-77638 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes three vulnerabiliti...

GLSA-202608-32 : Tor: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-32 Tor: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Tor. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from the...

Tor: Multiple Vulnerabilities

Background Tor is an implementation of second generation Onion Routing, a connection-oriented anonymizing communication service. Description Multiple vulnerabilities have been discovered in Tor. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CV...

openSUSE 16 Security Update : tor (openSUSE-SU-2026:21660-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21660-1 advisory. Changes in tor: - Update to 0.4.9.11 Major bugfixes - onion services: Prevent a race condition boo1275918, CVE-2026-77638 - client: no longer...

tor-0.4.9.11-1.1 on GA media (moderate)

tor-0.4.9.11-1.1 on GA media Announcement ID: openSUSE-SU-2026:11590-1 Rating: moderate Cross-References: CVE-2026-77584 CVE-2026-77587 CVE-2026-77638 Affected Products: openSUSE Tumbleweed An update that solves 3 vulnerabilities can now be installed. Description: These are all security issues...

OPENSUSE-SU-2026:21660-1 Security update for tor

This update for tor fixes the following issues: Changes in tor: - Update to 0.4.9.11 Major bugfixes + onion services: Prevent a race condition boo1275918, CVE-2026-77638 + client: no longer assert and exit if an onion service encodes an all-zero public key for one of its introduction points +...