Mageia: Security Advisory (MGASA-2014-0312)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2021-0180)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2017-0444)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-202107-25 : Tor: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-25 Tor: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Tor. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

Data Privacy Day: Know your rights, and the right tools to stay private

Not all data privacy rights are the same. There’s the flimsy, the firm, the enforceable, and the antiquated, and, unfortunately, much of what determines the quality of your own data privacy rights is little more than your home address. Those in Chile, for example, enjoy a globally rare...

Denial of Service in Onionshare

Between September 26, 2021 and October 8, 2021, Radically Open Security conducted a penetration test of OnionShare 2.4, funded by the Open Technology Fund's Red Team lab. - Vulnerability ID: OTF-012 - Vulnerability type: Denial of Service - Threat level: Moderate Description: The receive mode...

Improper Access Control

onionsharecli is vulnerable to improper access control. The vulnerability allows a remote unauthenticated attacker to inject javascript or other external resources like fonts or images via Tor network because it is not possible to configure this CSP for individual pages...

OnionShare has an unspecified vulnerability (CNVD-2022-06477)

OnionShare is an open source tool used to securely and anonymously share files, host websites, and chat with friends using the Tor network. Used to securely and anonymously share files, host websites, and chat with friends using the Tor network, a security vulnerability exists in OnionShare that...

OnionShare out-of-bounds read vulnerability

OnionShare is an open source tool for securely and anonymously sharing files, hosting websites, and chatting with friends using the Tor network. OnionShare is vulnerable to an out-of-bounds read vulnerability that could be exploited by attackers to conduct denial-of-service attacks...

OnionShare has an unspecified vulnerability (CNVD-2022-06473)

OnionShare is an open source tool for securely and anonymously sharing files, hosting websites, and chatting with friends using the Tor network. OnionShare has a security vulnerability, and no details of the vulnerability are available...

OnionShare has an unspecified vulnerability (CNVD-2022-06478)

OnionShare is an open source tool used to securely and anonymously share files, host websites and chat with friends using the Tor network. Used to securely and anonymously share files, host websites, and chat with friends using the Tor network, a security vulnerability exists in OnionShare that...

OnionShare input validation error vulnerability

OnionShare is an open source tool for securely and anonymously sharing files, hosting websites, and chatting with friends using the Tor network. Used to securely and anonymously share files, host websites, and chat with friends using the Tor network, OnionShare is vulnerable to an input validatio...

OnionShare has an unspecified vulnerability (CNVD-2022-06476)

OnionShare is an open source tool for securely and anonymously sharing files, hosting websites, and chatting with friends using the Tor network. Used to securely and anonymously share files, host websites, and chat with friends using the Tor network, OnionShare has a security vulnerability that...

OnionShare has an unspecified vulnerability (CNVD-2022-06475)

OnionShare is an open source tool for securely and anonymously sharing files, hosting websites, and chatting with friends using the Tor network. OnionShare has a security vulnerability that could be exploited by attackers to compromise sensitive data...

OnionShare has an unspecified vulnerability (CNVD-2022-06474)

OnionShare is an open source tool for securely and anonymously sharing files, hosting websites and chatting with friends using the Tor network. Used to securely and anonymously share files, host websites, and chat with friends using the Tor network, OnionShare has a security vulnerability that...

OnionShare has an unspecified vulnerability (CNVD-2022-06479)

OnionShare is an open source tool for securely and anonymously sharing files, hosting websites, and chatting with friends using the Tor network. OnionShare has a security vulnerability, and no details of the vulnerability are available...

CVE-2022-21694

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. The website mode of the onionshare allows to use a hardened CSP, which will block any scripts and external resources. It is not possible to configure...

Design/Logic Flaw

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. The website mode of the onionshare allows to use a hardened CSP, which will block any scripts and external resources. It is not possible to configure...

PYSEC-2022-41

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions The path parameter of the requested URL is not sanitized before being passed to the QT frontend. This path is used in all componen...

CVE-2022-21692

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions anyone with access to the chat environment can write messages disguised as another chat participant...