sniffly

Sniffly2 Sniffly2 is a variant of Sniffly which abuses HTTP Strict Transport Security headers and the Performance Timing API in order to sniff your browsing history in Chromium-based browsers. Demo Visit http://diracdeltas.github.io/sniffly in Chrome/Chromium/Brave/etc. with HTTPS Everywhere...

CryKeX

Properties: Cross-platform Minimalism Simplicity Interactivity Compatibility/Portability Application Independable Process Wrapping Process Injection Dependencies: Unix - should work on any Unix-based OS BASH - the whole script root privileges optional Limitations: AES and RSA keys only Fails most...

Tor-0day-JavaScript-Exploit

CVE-2024-9680 - TORブラウザ 0dayエクスプロイト アニメーションタイムラインにおけるUAF（Use-After-Free） - リモートコード実行の脆弱性 Torブラウザのユーザーを標的とした、実際に悪用されている脆弱性 分析を見る • 公式CVE 概要 このリポジトリには、Firefoxのアニメーションタイムライン管理における重大なUAF（Use-After-Free）脆弱性であるCVE-2024-9680の包括的な分析と教育用のデモが含まれています。この脆弱性により、ブラウザのコンテンツプロセスでリモートコード実行が可能になります。 影響を受けるバージョン...

CVE-2021-46702

CVE-2021-46702 説明: Windows 10 build 10586上のTor Browser 9.0.7は、情報漏えいに対して脆弱です。これにより、ローカルの攻撃者が意図された匿名性機能を回避し、ローカルユーザーが訪問したオニオンサービスに関する情報を取得できる可能性があります。これは、ユーザーが製品を使用した数時間後であっても、RAMメモリを分析することで達成できます。これは、製品がメモリを適切に解放しないために発生します。 テスト済みバージョン: Tor Browser - 9.0.7 製品のベンダー https://www.torproject.org/ 攻撃タイプ...

GHSA-XPMJ-WJCP-6PWW

creationtimestamp| type| source ---|---|--- 2026-08-19 09:32:00+00:00| seen| https://gist.github.com/alon710/f8eaee2020ed8f819add6f9d1de77bf8...

Researchers Show a Single Malicious Webpage Visit Can Compromise Tor Browser

Nebula Security says a patched Firefox JIT flaw could be triggered by simply visiting a malicious webpage and was also used to compromise Tor Browser. Tracked as CVE-2026-10702 , the bug provides arbitrary code execution inside the browser's renderer process. Mozilla rated it High and fixed it in...

CVE-2026-44597

Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a reason in its payload, aka TROVE-2026-011...

CVE-2019-12383

Tor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to detect the browser's UI locale by measuring a button width, even if the user has a "Don't send my language" setting...

[SECURITY] Fedora 43 Update: torbrowser-launcher-0.3.9-2.fc43

Tor Browser Launcher is intended to make Tor Browser easier to install and use for GNU/Linux users. You install torbrowser-launcher from your distribution's package manager and it handles everything else: Downloads and installs the most recent version of Tor Browser in your langu age and for your...

EUVD-2016-4221

Malware in sbrugna...

EUVD-2019-4018

Malware in sbrugna...

EUVD-2021-25608

Malware in sbrugna...

EUVD-2014-5638

Malware in sbrugna...

EUVD-2017-7734

Malware in sbrugna...

EUVD-2019-4626

Malware in sbrugna...

EUVD-2018-8768

Malware in sbrugna...

EUVD-2017-7826

Malware in sbrugna...

EUVD-2021-33362

Malicious code in bioql PyPI...

Mozilla Patches Critical Firefox Bug Similar to Chrome's Recent Zero-Day Vulnerability

Mozilla has released updates to address a critical security flaw impacting its Firefox browser for Windows, merely days after Google patched a similar flaw in Chrome that came under active exploitation as a zero-day. The security vulnerability, CVE-2025-2857, has been described as a case of an...

Linux Distros Unpatched Vulnerability : CVE-2019-12383

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to detect the browser's UI locale by measuring a button width, ev...