267 matches found
CVE-2018-16983
NoScript Classic before 5.1.8.7, as used in Tor Browser 7.x and other products, allows attackers to bypass script blocking via the text/html;/json Content-Type value...
Design/Logic Flaw
NoScript Classic before 5.1.8.7, as used in Tor Browser 7.x and other products, allows attackers to bypass script blocking via the text/html;/json Content-Type value...
CVE-2018-16983
NoScript Classic before 5.1.8.7, as used in Tor Browser 7.x and other products, allows attackers to bypass script blocking via the text/html;/json Content-Type value...
CVE-2018-16983
CVE-2018-16983 affects NoScript Classic prior to 5.1.8.7 (used in Tor Browser 7.x and other products). The issue lets an attacker bypass script blocking by manipulating the Content-Type value text/html;/json, enabling bypass of the NoScript protection. Impact is described as content-script/script...
CVE-2018-16983
Removed by vendor...
Tor Browser SMB Deanonymization / Information Disclosure
Advisory ID: SGMA18-002 Title: Tor Browser Deanonymization With SMB Product: Tor Browser 8.0, Firefox 62 / 60.2.0esr Vendor: torproject.org, mozilla.org Type: Information Disclosure Risk level: 4 / 5 Credits: [email protected] CVE: CVE-2017-16639 Vendor notification: 2017-11-02...
Tor Browser Deanonymization With SMB Information Disclosure Vulnerability
Tor Browser is a web browser. An information disclosure vulnerability exists in Tor Browser Deanonymization With SMB, which allows remote attackers to bypass expected anonymization features and discover client IP addresses...
Security firm uses Twitter to disclose critical zero-day flaw in Tor Browser
By Waqas Zerodium, an infosec and premium zero-day acquisition platform tweeted about the flaw in Tor browser on Monday. The infamous exploit vendor and buyer/seller of popular software vulnerabilities, Zerodium has revealed a critical flaw in Tor browser software. According to a tweet posted by...
Tor Browser 7.x NoScript Bypass
!/usr/bin/python from BaseHTTPServer import BaseHTTPRequestHandler,HTTPServer PORTNUMBER = 31337 class myHandlerBaseHTTPRequestHandler: Handler for the GET requests def doGETself: self.sendresponse200 self.sendheader'Content-type','text/html;/json' Here is where the magic happens self.endheaders...
Tor Browser 7.0.8 Information Disclosure Vulnerability
This write up holds the details for the Tor Browser information disclosure vulnerability as discussed in CVE-2017-16541. Version 7.0.8 is affected. There is the details for CVE-2017-16541 Tor Browser information disclosure, More infos at:...
Tor Browser 7.0.8 Information Disclosure
Hi, there is the details for CVE-2017-16541 Tor Browser information disclosure, More infos at: https://www.wearesegment.com/research/tormoil-deanonymize-tor-browser-users-with-automount/ Tor Browser version 7.0.8, and probably prior, for Mac OS X and Linux, is affected by an information disclosur...
Tor Browser Zero-Day Exploit Revealed Online – Patch Now
Zerodium, the infamous exploit vendor that earlier this year offered $1 million for submitting a zero-day exploit for Tor Browser, today publicly revealed a critical zero-day flaw in the anonymous browsing software that could reveal your identity to the sites you visit. In a Tweet, Zerodium share...
Tor Browser Zero-Day Exploit Revealed Online – Patch Now
Zerodium, the infamous exploit vendor that earlier this year offered $1 million for submitting a zero-day exploit for Tor Browser, today publicly revealed a critical zero-day flaw in the anonymous browsing software that could reveal your identity to the sites you visit. In a Tweet, Zerodium share...
Tor Browser 8.0 - Everything you Need to Safely Browse the Internet
Tor Browser 8.0, is the first stable release based on Firefox 60 ESR, is now available from the Tor Browser Project page and also from distribution directory. This release is all about users first. Tor Browser 8.0 comes with a series of user experience improvements that address a set of long-term...
Tor Browser < 0.3.2.10 - Use After Free (PoC ) Exploit
Tor Browser versions 0.3.2.x before 0.3.2.10 suffer from a use-after-free vulnerability that can result in a denial of service condition. Exploit Title: Tor Browser - Use After Free PoC Exploit Author: t4rkd3vilz Vendor Homepage: https://www.torproject.org/ Software Link:...
Tor Browser 0.3.2.x Use-After-Free
Exploit Title: Tor Browser - Use After Free Vulnerability Date: 09.07.2018 Exploit Author: t4rkd3vilz Vendor Homepage: https://www.torproject.org/ Software Link: https://www.torproject.org/download/download-easy.html.en Version: Tor 0.3.2.x before 0.3.2.10 Tested on: Kali Linux CVE : CVE-2018-049...
Tor Browser < 0.3.2.10 - Use After Free (PoC)
Exploit Title: Tor Browser - Use After Free PoC Date: 09.07.2018 Exploit Author: t4rkd3vilz Vendor Homepage: https://www.torproject.org/ Software Link: https://www.torproject.org/download/download-easy.html.en Version: Tor 0.3.2.x before 0.3.2.10 Tested on: Kali Linux CVE : CVE-2018-0491 Run...
CVE-2016-9079
A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox 50.0.2, Firefox ESR 45.5.1, and Thunderbird 45.5.1...
DEBIAN-CVE-2016-9079
A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox 50.0.2, Firefox ESR 45.5.1, and Thunderbird 45.5.1...
CVE-2016-9079
A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox 50.0.2, Firefox ESR 45.5.1, and Thunderbird 45.5.1...