Browse / Tor

Tor

See its reports on the map

What gets reported to Tor

• Information Disclosure17
• Memory Corruption17
• Denial of Service4
• Misconfiguration4
• Other weaknesses3
• Authentication2

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Potential IP revealing using UNC Path in Windows File PickerInformativeInformation Disclosure · low
   25 votes
2. SQL Injection in parameter REPORTInformativeSQL Injection · medium
   23 votes
3. Address Bar Spoofing on TOR BrowserInformativePhishing · high
   14 votes
4. Zip bombInformativeIncorrect Calculation of Buffer Size · critical
   14 votes
5. [Android org.torproject.android] Possible to force list of bridgesInformativeForced Browsing · high
   13 votes
6. Expose user IP if TOR crashsInformativeUncontrolled Resource Consumption
   11 votes
7. Use of unitialized value in crypto_pk_num_bits (src/common/crypto.c:971)InformativeMemory Corruption - Generic
   11 votes
8. Use-after-free during XML transformations (MFSA-2016-27)InformativeMemory Corruption - Generic
   $30010 votes
9. Report Regarding Security VulnerabilityInformative
   9 votes
10. solving TOR vulnerability, in other to make bruteforce difficultInformativeArray Index Underflow · low
    9 votes
11. [rt.torproject.org] No Rate Limitting on Login FormInformativeImproper Restriction of Authentication Attempts
    9 votes
12. Expose relay IP in the debug (The source is different from the rendering)InformativeInformation Disclosure
    7 votes
13. Content spoofing onInformativeViolation of Secure Design Principles · low
    6 votes
14. Tor Project - Full Path DisclosureInformativeInformation Exposure Through an Error Message · low
    5 votes
15. Tor Browser using --log or --verbose logs the exact connection time a client connects to any v2 domains.InformativeInformation Disclosure · high
    4 votes
16. Preferred language option fingerprinting issue in Tor BrowserInformativeInformation Disclosure · low
    3 votes
17. Use of uninitialized value in networkstatus_parse_vote_from_string (src/or/routerparse.c:3533)InformativeMemory Corruption - Generic
    2 votes
18. Use of uninitialized value in memarea_strdup (src/common/memarea.c:369)InformativeMemory Corruption - Generic
    1 votes
19. Uncloaking hidden services and hidden service usersInformativeMan-in-the-Middle
    1 votes
20. Stack overflow in UnbindFromTree (browser can be crashed remotely)InformativeStack Overflow · high
    1 votes
21. Tor Browser: iframe with `data:` uri has access to parent windowInformativehigh
22. Cross-domain linkability when system time changed in Tor BrowserInformativePrivacy Violation · low
23. Crashes/Buffer at 0x2C0086,name=PBrowser::Msg_Destroy InformativeClassic Buffer Overflow · medium
24. Sql query disclosure,InformativeInformation Disclosure · low