Design/Logic Flaw

An issue in Kloudq Technologies Limited Tor Equip 1.0, Tor Loco Mini 1.0 through 3.1 allows a remote attacker to execute arbitrary code via a crafted request to the MQTT component...

CVE-2023-41442

An issue in Kloudq Technologies Limited Tor Equip 1.0, Tor Loco Mini 1.0 through 3.1 allows a remote attacker to execute arbitrary code via a crafted request to the MQTT component...

Tor Equip Security Vulnerability

Tor Equip is Tor's gateway for monitoring chillers, gensets and compressors. A security vulnerability exists in Tor Equip version 1.0, Tor Loco Mini versions 1.0 through 3.1, which originated from a vulnerability that could allow a remote attacker to execute arbitrary code via a crafted request t...

CVE-2023-41442

CVE-2023-41442 affects Kloudq Technologies Limited Tor Equip 1.0 and Tor Loco Mini 1.0–3.1, where a crafted request to the MQTT component allows a remote attacker to execute arbitrary code. Public documentation consistently describes an MQTT-related vulnerability arising in these devices, with a ...

PT-2023-27945 · Kloudq Technologies Limited · Tor Loco Mini +1

Name of the Vulnerable Software and Affected Versions: Kloudq Technologies Limited Tor Equip version 1.0 Kloudq Technologies Limited Tor Loco Mini versions 1.0 through 3.1 Description: The issue allows a remote attacker to execute arbitrary code via a crafted request to the "MQTT component"...

openSUSE 15 Security Update : tor (openSUSE-SU-2023:0361-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0361-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

OPENSUSE-SU-2023:0361-1 Security update for tor

This update for tor fixes the following issues: - tor 0.4.8.8: Mitigate an issue when Tor compiled with OpenSSL can crash during handshake with a remote relay. TROVE-2023-004, boo1216873 Regenerate fallback directories generated on November 03, 2023. Update the geoip files to match the IPFire...

PT-2023-35516 · Openssl +1 · Openssl +1

Name of the Vulnerable Software and Affected Versions: tor versions 0.4.7.14 through 0.4.8.7 tor version 0.4.8.8 Description: The issue is related to several bugs and reliability problems in the Tor software, including a crash during handshake with a remote relay when compiled with OpenSSL,...

Security update for tor (moderate)

openSUSE Security Update: Security update for tor Announcement ID: openSUSE-SU-2023:0361-1 Rating: moderate References: 1216873 Affected Products: openSUSE Backports SLE-15-SP4 openSUSE Backports SLE-15-SP5 An update that contains security fixes can now be installed. Description: This update for...

StripedFly Malware Operated Unnoticed for 5 Years, Infecting 1 Million Devices

An advanced strain of malware masquerading as a cryptocurrency miner has managed to fly the radar for over five years, infecting no less than one million devices around the world in the process. That's according to findings from Kaspersky, which has codenamed the threat StripedFly, describing it ...

StripedFly: Perennially flying under the radar

Introduction Its just another cryptocurrency miner… Nobody would even suspect the mining malware was merely a mask, masquerading behind an intricate modular framework that supports both Linux and Windows. It comes equipped with a built-in TOR network tunnel for communication with command servers,...

CVE-2023-45813 Inefficient Regular Expression Complexity in TorBot

Torbot is an open source tor network intelligence tool. In affected versions the torbot.modules.validators.validatelink function uses the python-validators URL validation regex. This particular regular expression has an exponential complexity which allows an attacker to cause an application crash...

CVE-2023-45813

Summary: CVE-2023-45813 affects Torbot, an open source tor network intelligence tool. The vulnerability arises in the function torbot.modules.validators.validate_link which uses the python-validators URL validation regex; this regex has exponential complexity, enabling a crafted URL to trigger a ...

What is The Dark Web ?

The Undernet, a term frequently shrouded in enigma and often linked with unlawful activities, is a concealed segment of the digital world that is purposefully veiled and unreachable via regular internet browsers. This chapter aims to unveil the secrets of the Undernet, step by step demythifying i...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : Tor vulnerabilities (USN-5036-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5036-1 advisory. It was discovered that Tor incorrectly handled certain memory operations. A remote attacker could use this issue to cause a denia...

What is the dark web?

Most users interact with the internet through the web, and many of the threat actors we write about operate on the "dark web." Broadly speaking, the dark web is a small portion of the "deep web," where the deep web represents most of the Web. We know, its confusing -- lets walk through an example...

Microsoft Defender Flags Tor Browser as Win32/Malgent!MTB Malware

By Waqas Win32/Malgent!MTB is a generic detection that Microsoft Defender uses to identify Trojans that are designed to perform a variety of malicious actions on a computer. This is a post from HackRead.com Read the original post: Microsoft Defender Flags Tor Browser as Win32/Malgent!MTB Malware...

curl: CVE-2023-38545: socks5 heap buffer overflow

Vulnerability description not provided...

Cybercriminals Using New ASMCrypt Malware Loader to Fly Under the Radar

Threat actors are selling a new crypter and loader called ASMCrypt, which has been described as an "evolved version" of another loader malware known as DoubleFinger. "The idea behind this type of malware is to load the final payload without the loading process or the payload itself being detected...

‘Snatch’ Ransom Group Exposes Visitor IP Addresses

The victim shaming site operated by the Snatch ransomware group is leaking data about its true online location and internal operations, as well as the Internet addresses of its visitors, KrebsOnSecurity has found. The leaked data suggest that Snatch is one of several ransomware groups using paid...