HexBrain
Sign in

Browse / Tor

Tor

53disclosed reports
$3,600paid in bounties

See its reports on the map

What gets reported to Tor

Most upvoted reports

AllValidInformativeN/ADuplicate

  1. Linux TBB SFTP URI allows local IP disclosureInformation Disclosure · critical
    $3,00071 votes
  2. Detecting Tor Browser UI LanguagePrivacy Violation · low
    64 votes
  3. XSS on about:tbupdateCross-site Scripting (XSS) - Reflected
    $10043 votes
  4. Malicious Conflux Endpoint Can Leave Stale Global OOO Queue Accounting After TeardownUncontrolled Resource Consumption · low
    $10035 votes
  5. Conflux-queued zero-length RELAY_END triggers heap out-of-bounds readOut-of-bounds Read · medium
    33 votes
  6. Snowflake server: Leak of TLS packets from other clientsInformation Disclosure · high
    30 votes
  7. Scrollbar Width permits detecting browser platformInformation Disclosure · low
    29 votes
  8. Tor onion service INTRODUCE2 invalid-MAC cells permanently grow service replay cacheUncontrolled Resource Consumption · low
    28 votes
  9. Potential IP revealing using UNC Path in Windows File PickerInformativeInformation Disclosure · low
    25 votes
  10. SQL Injection in parameter REPORTInformativeSQL Injection · medium
    23 votes
  11. De-anonymization by visiting specially crafted bookmark.Information Disclosure · high
    15 votes
  12. Access to local file system using javascriptViolation of Secure Design Principles · high
    15 votes
  13. Address Bar Spoofing on TOR BrowserInformativePhishing · high
    14 votes
  14. Zip bombInformativeIncorrect Calculation of Buffer Size · critical
    14 votes
  15. [Android org.torproject.android] Possible to force list of bridgesInformativeForced Browsing · high
    13 votes
  16. Detect Tor Browser's languagePrivacy Violation
    11 votes
  17. Expose user IP if TOR crashsInformativeUncontrolled Resource Consumption
    11 votes
  18. Use of unitialized value in crypto_pk_num_bits (src/common/crypto.c:971)InformativeMemory Corruption - Generic
    11 votes
  19. Multiple Path Transversal VulnerabilitesN/APath Traversal · medium
    11 votes
  20. 16 instances where return value of OpenSSL i2d_RSAPublicKey is discarded -- might lead to use of uninitialized memoryInformation Disclosure
    11 votes
  21. languagechange event fires simultaneously on all tabsPrivacy Violation · low
    $10010 votes
  22. Simple CSS line-height identifies platformInformation Disclosure · low
    10 votes
  23. Use-after-free during XML transformations (MFSA-2016-27)InformativeMemory Corruption - Generic
    $30010 votes
  24. Report Regarding Security VulnerabilityInformative
    9 votes
  25. solving TOR vulnerability, in other to make bruteforce difficultInformativeArray Index Underflow · low
    9 votes
  26. [rt.torproject.org] No Rate Limitting on Login FormInformativeImproper Restriction of Authentication Attempts
    9 votes
  27. [tor] pre-emptive defenses, potential vulnerabilitiesViolation of Secure Design Principles
    8 votes
  28. Expose relay IP in the debug (The source is different from the rendering)InformativeInformation Disclosure
    7 votes
  29. [tor] libevent dns OOB readMemory Corruption - Generic
    7 votes
  30. [tor] control connection pre-auth DoS (infinite loop) with --enable-buffereventsUncontrolled Resource Consumption
    7 votes
  31. Content spoofing onInformativeViolation of Secure Design Principles · low
    6 votes
  32. potential memory corruption in or/buffers.c (particularly on 32 bit)Memory Corruption - Generic
    6 votes
  33. Heap corruption via memarea.cMemory Corruption - Generic
    6 votes
  34. Overreads/overcopies in torsocksMemory Corruption - Generic
    6 votes
  35. libevent (stack) buffer overflow in evutil_parse_sockaddr_portMemory Corruption - Generic
    6 votes
  36. [tor] libevent dns remote stack overread vulnerabilityMemory Corruption - Generic
    6 votes
  37. smartlist_add, smartlist_insert (may) cause heap corruption as a result of inadequate checks in smartlist_ensure_capacityMemory Corruption - Generic
    6 votes
  38. https://get.ooni.torproject.org/N/A
    5 votes
  39. Tor Project - Full Path DisclosureInformativeInformation Exposure Through an Error Message · low
    5 votes
  40. Tor Browser using --log or --verbose logs the exact connection time a client connects to any v2 domains.InformativeInformation Disclosure · high
    4 votes
  41. Information Exposure Through Directory ListingN/AInformation Exposure Through Directory Listing · high
    3 votes
  42. Email Spoofing Possible on torproject.org Email DomainN/ABusiness Logic Errors · medium
    3 votes
  43. Preferred language option fingerprinting issue in Tor BrowserInformativeInformation Disclosure · low
    3 votes
  44. Use of unitialized value in token_check_object (src/or/parsecommon.c:224)DuplicateMemory Corruption - Generic
    3 votes
  45. Use of uninitialized value in networkstatus_parse_vote_from_string (src/or/routerparse.c:3533)InformativeMemory Corruption - Generic
    2 votes
  46. Enforce minimum master password complexityN/APassword in Configuration File · medium
    1 votes
  47. Use of uninitialized value in memarea_strdup (src/common/memarea.c:369)InformativeMemory Corruption - Generic
    1 votes
  48. Uncloaking hidden services and hidden service usersInformativeMan-in-the-Middle
    1 votes
  49. Stack overflow in UnbindFromTree (browser can be crashed remotely)InformativeStack Overflow · high
    1 votes
  50. Tor Browser: iframe with `data:` uri has access to parent windowInformativehigh
  51. Cross-domain linkability when system time changed in Tor BrowserInformativePrivacy Violation · low
  52. Crashes/Buffer at 0x2C0086,name=PBrowser::Msg_Destroy InformativeClassic Buffer Overflow · medium
  53. Sql query disclosure,InformativeInformation Disclosure · low