Fedora 38 : tor (2023-29cafcbf4a)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-29cafcbf4a advisory. update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-9/10155 Tenable has extracted the preceding description block directl...

In-Depth Analysis of NoEscape Ransomware

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The NoEscape ransomware, suspected to be a rebrand of Avaddon, targets enterprises globally through multi-extortion attacks. Operating as Ransomware-as-a-Service, it encrypts files, changes wallpapers, a...

CVE-2023-41442

An issue in Kloudq Technologies Limited Tor Equip 1.0, Tor Loco Mini 1.0 through 3.1 allows a remote attacker to execute arbitrary code via a crafted request to the MQTT component...

CVE-2023-41442

An issue in Kloudq Technologies Limited Tor Equip 1.0, Tor Loco Mini 1.0 through 3.1 allows a remote attacker to execute arbitrary code via a crafted request to the MQTT component...

CVE-2023-41442

An issue in Kloudq Technologies Limited Tor Equip 1.0, Tor Loco Mini 1.0 through 3.1 allows a remote attacker to execute arbitrary code via a crafted request to the MQTT component...

Design/Logic Flaw

An issue in Kloudq Technologies Limited Tor Equip 1.0, Tor Loco Mini 1.0 through 3.1 allows a remote attacker to execute arbitrary code via a crafted request to the MQTT component...

CVE-2023-41442

An issue in Kloudq Technologies Limited Tor Equip 1.0, Tor Loco Mini 1.0 through 3.1 allows a remote attacker to execute arbitrary code via a crafted request to the MQTT component...

Tor Equip Security Vulnerability

Tor Equip is Tor's gateway for monitoring chillers, gensets and compressors. A security vulnerability exists in Tor Equip version 1.0, Tor Loco Mini versions 1.0 through 3.1, which originated from a vulnerability that could allow a remote attacker to execute arbitrary code via a crafted request t...

PT-2023-27945 · Kloudq Technologies Limited · Tor Loco Mini +1

Name of the Vulnerable Software and Affected Versions: Kloudq Technologies Limited Tor Equip version 1.0 Kloudq Technologies Limited Tor Loco Mini versions 1.0 through 3.1 Description: The issue allows a remote attacker to execute arbitrary code via a crafted request to the "MQTT component"...

CVE-2023-41442

CVE-2023-41442 affects Kloudq Technologies Limited Tor Equip 1.0 and Tor Loco Mini 1.0–3.1, where a crafted request to the MQTT component allows a remote attacker to execute arbitrary code. Public documentation consistently describes an MQTT-related vulnerability arising in these devices, with a ...

openSUSE 15 Security Update : tor (openSUSE-SU-2023:0361-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0361-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

OPENSUSE-SU-2023:0361-1 Security update for tor

This update for tor fixes the following issues: - tor 0.4.8.8: Mitigate an issue when Tor compiled with OpenSSL can crash during handshake with a remote relay. TROVE-2023-004, boo1216873 Regenerate fallback directories generated on November 03, 2023. Update the geoip files to match the IPFire...

PT-2023-35516 · Openssl +1 · Openssl +1

Name of the Vulnerable Software and Affected Versions: tor versions 0.4.7.14 through 0.4.8.7 tor version 0.4.8.8 Description: The issue is related to several bugs and reliability problems in the Tor software, including a crash during handshake with a remote relay when compiled with OpenSSL,...

Security update for tor (moderate)

openSUSE Security Update: Security update for tor Announcement ID: openSUSE-SU-2023:0361-1 Rating: moderate References: 1216873 Affected Products: openSUSE Backports SLE-15-SP4 openSUSE Backports SLE-15-SP5 An update that contains security fixes can now be installed. Description: This update for...

StripedFly Malware Operated Unnoticed for 5 Years, Infecting 1 Million Devices

An advanced strain of malware masquerading as a cryptocurrency miner has managed to fly the radar for over five years, infecting no less than one million devices around the world in the process. That's according to findings from Kaspersky, which has codenamed the threat StripedFly, describing it ...

StripedFly: Perennially flying under the radar

Introduction Its just another cryptocurrency miner… Nobody would even suspect the mining malware was merely a mask, masquerading behind an intricate modular framework that supports both Linux and Windows. It comes equipped with a built-in TOR network tunnel for communication with command servers,...

CVE-2023-45813 Inefficient Regular Expression Complexity in TorBot

Torbot is an open source tor network intelligence tool. In affected versions the torbot.modules.validators.validatelink function uses the python-validators URL validation regex. This particular regular expression has an exponential complexity which allows an attacker to cause an application crash...

CVE-2023-45813

Summary: CVE-2023-45813 affects Torbot, an open source tor network intelligence tool. The vulnerability arises in the function torbot.modules.validators.validate_link which uses the python-validators URL validation regex; this regex has exponential complexity, enabling a crafted URL to trigger a ...

What is The Dark Web ?

The Undernet, a term frequently shrouded in enigma and often linked with unlawful activities, is a concealed segment of the digital world that is purposefully veiled and unreachable via regular internet browsers. This chapter aims to unveil the secrets of the Undernet, step by step demythifying i...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : Tor vulnerabilities (USN-5036-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5036-1 advisory. It was discovered that Tor incorrectly handled certain memory operations. A remote attacker could use this issue to cause a denia...