Browse / Tor

Tor

See its reports on the map

What gets reported to Tor

• Information Disclosure17
• Memory Corruption17
• Denial of Service4
• Misconfiguration4
• Other weaknesses3
• Authentication2

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Linux TBB SFTP URI allows local IP disclosureInformation Disclosure · critical
   $3,00071 votes
2. Detecting Tor Browser UI LanguagePrivacy Violation · low
   64 votes
3. XSS on about:tbupdateCross-site Scripting (XSS) - Reflected
   $10043 votes
4. Malicious Conflux Endpoint Can Leave Stale Global OOO Queue Accounting After TeardownUncontrolled Resource Consumption · low
   $10035 votes
5. Conflux-queued zero-length RELAY_END triggers heap out-of-bounds readOut-of-bounds Read · medium
   33 votes
6. Snowflake server: Leak of TLS packets from other clientsInformation Disclosure · high
   30 votes
7. Scrollbar Width permits detecting browser platformInformation Disclosure · low
   29 votes
8. Tor onion service INTRODUCE2 invalid-MAC cells permanently grow service replay cacheUncontrolled Resource Consumption · low
   28 votes
9. De-anonymization by visiting specially crafted bookmark.Information Disclosure · high
   15 votes
10. Access to local file system using javascriptViolation of Secure Design Principles · high
    15 votes
11. Detect Tor Browser's languagePrivacy Violation
    11 votes
12. 16 instances where return value of OpenSSL i2d_RSAPublicKey is discarded -- might lead to use of uninitialized memoryInformation Disclosure
    11 votes
13. languagechange event fires simultaneously on all tabsPrivacy Violation · low
    $10010 votes
14. Simple CSS line-height identifies platformInformation Disclosure · low
    10 votes
15. [tor] pre-emptive defenses, potential vulnerabilitiesViolation of Secure Design Principles
    8 votes
16. [tor] libevent dns OOB readMemory Corruption - Generic
    7 votes
17. [tor] control connection pre-auth DoS (infinite loop) with --enable-buffereventsUncontrolled Resource Consumption
    7 votes
18. potential memory corruption in or/buffers.c (particularly on 32 bit)Memory Corruption - Generic
    6 votes
19. Heap corruption via memarea.cMemory Corruption - Generic
    6 votes
20. Overreads/overcopies in torsocksMemory Corruption - Generic
    6 votes
21. libevent (stack) buffer overflow in evutil_parse_sockaddr_portMemory Corruption - Generic
    6 votes
22. [tor] libevent dns remote stack overread vulnerabilityMemory Corruption - Generic
    6 votes
23. smartlist_add, smartlist_insert (may) cause heap corruption as a result of inadequate checks in smartlist_ensure_capacityMemory Corruption - Generic
    6 votes