Tor: Linux TBB SFTP URI allows local IP disclosure

Browsing to a simple URL to an sftp URI allows bypasses socks proxy for DNS and browsing. Tested on a clean install of Ubuntu 16.04 with TBB 7.0.2 4097d43aa0be86ae3fe43ec8f3ac5394 download from https://www.torproject.org/dist/torbrowser/7.0.2/tor-browser-linux64-7.0.2en-US.tar.xz POC: Navigate to...

CVE-2010-5269

CVE-2010-5269 : The issue is an untrusted search path vulnerability in the TBB library. Specifically, tbb.dll used by Intel Threading Building Blocks (TBB) 2.2.013 can be hijacked by a malicious tbbmalloc.dll placed in the current working directory, enabling local privilege escalation as demonstr...

CVE-2006-1815

CVE-2006-1815 affects Tritanium Bulletin Board (TBB) 1.2.3: register.php is vulnerable to reflected XSS via the newuser_realname and newuser_icq parameters in the faction=register flow (index.php), allowing remote script/HTML injection. This vector is distinct from CVE-2006-1768. Root cause cited...

CVE-2006-1768

CVE-2006-1768 affects Tritanium Bulletin Board (TBB) 1.2.3. The vulnerability is an XSS flaw in register.php where the attacker can inject arbitrary script/HTML via the (1) newuser_name, (2) newuser_email, or (3) newuser_hp parameters in the faction=register mode of index.php. The associated conn...