TorWall - Transparent Tor for Windows

Tallow is a small program that redirects all outbound traffic from a Windows machine via the Tor anonymity network. Any traffic that cannot be handled by Tor, e.g. UDP, is blocked. Tallow also intercepts and handles DNS requests preventing potential leaks. Tallow has several applications,...

Tor: Use of unitialized value in crypto_pk_num_bits (src/common/crypto.c:971)

Vulnerability description not provided...

Tor: Use of uninitialized value in memarea_strdup (src/common/memarea.c:369)

Triggered in 51e4748 , compiled with clang 6.0.0-trunk and -fsanitize=memory. ./fuzz-hsdescv2 test001 Uninitialized bytes in interceptorstrlen at offset 0 inside 0x7fff5525ff80, 51 ==19693==WARNING: MemorySanitizer: use-of-uninitialized-value 0 0x5570edfe5fbd in memareastrdup...

DSA-3993-1 tor - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3993-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Tor: https://get.ooni.torproject.org/

Vulnerability description not provided...

Tor: Content spoofing on

Vulnerability description not provided...

Dark-Web Drug Dealer Arrested After He Travelled US for World Beard Championships

United States authorities arrested suspected dark web drug kingpin late last month while he was travelling from his base in France to the United States of America for this year’s annual World Beard and Mustache Championships. Gal Vallerius, a 38-year-old French national, was travelling to Austin,...

openSUSE Security Update : tor (openSUSE-2017-1092)

This update for tor fixes the following issues : - CVE-2017-0380: hidden services with the SafeLogging option disabled could disclose the stack boo1059194 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

Advanced Dork Searching Utility: Zeus-Scanner

Zeus is an advanced reconnaissance utility designed to make web application reconnaissance simple. Zeus comes complete with a powerful built-in URL parsing engine, multiple search engine compatibility, the ability to extract URLs from both ban and webcache URLs, the ability to run multiple...

EternalBlue Exploit Used in Retefe Banking Trojan Campaign

Criminals behind the Retefe banking Trojan have added a new component to their malware that uses the NSA exploit EternalBlue. The update makes Retefe the latest malware family to adopt the SMBv1 attack against a patched Windows vulnerability, and could signal an emerging trend, said researchers a...

MGASA-2017-0353 Updated tor packages fix security vulnerability

Due to the code that reports an error during the construction of an introduction point circuit, it is possible that some hidden services will sometimes write sensitive information into their logs if the SafeLogging option is disabled. Note that SafeLogging is enabled by default CVE-2017-0380...

Updated tor packages fix security vulnerability

Due to the code that reports an error during the construction of an introduction point circuit, it is possible that some hidden services will sometimes write sensitive information into their logs if the SafeLogging option is disabled. Note that SafeLogging is enabled by default CVE-2017-0380...

Security fix for the ALT Linux 8 package tor version 0.3.1.7-alt1.M80P.1

0.3.1.7-alt1.M80P.1 built Sept. 21, 2017 Anton Farygin in task 188387 Sept. 18, 2017 Vladimir Didenko - new version Fixes: CVE-2017-0380...

Tor 'rend_service_intro_established' function sensitive information disclosure vulnerability

Tor is a second-generation implementation of onion routing, used primarily for anonymous access to the Internet. A security vulnerability in the 'rendserviceintroestablished' function in the or/rendservice.c file in Tor allows remote attackers to exploit the vulnerability by submitting a special...

Tor: Tor Project - Full Path Disclosure

Vulnerability description not provided...

Tor: SQL Injection in parameter REPORT

Vulnerability description not provided...

Code injection

The rendserviceintroestablished function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.x before 0.3.0.11, 0.3.1.x before 0.3.1.7, and 0.3.2.x before 0.3.2.1-alpha, when SafeLogging is disabled, allows attackers to obtain sensitive information by leveraging access to t...

UBUNTU-CVE-2017-0380

The rendserviceintroestablished function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.x before 0.3.0.11, 0.3.1.x before 0.3.1.7, and 0.3.2.x before 0.3.2.1-alpha, when SafeLogging is disabled, allows attackers to obtain sensitive information by leveraging access to t...

CVE-2017-0380

The rendserviceintroestablished function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.x before 0.3.0.11, 0.3.1.x before 0.3.1.7, and 0.3.2.x before 0.3.2.1-alpha, when SafeLogging is disabled, allows attackers to obtain sensitive information by leveraging access to t...