Zerodium told ZDNet that it had bought details of the Tor browser flaw months ago, and then shared them with the company's government customers. Zerodium is a company that specializes in buying previously unknown software vulnerabilities from security researchers and then selling them to government groups. Still, the flaw's disclosure suggests that actual victims were hacked by the NoScript bug. NoScript's developer has also patched the vulnerability. You can install it automatically by clicking on the onion icon in left corner of the Tor browser window. The good news is that Tor browser 8.0, which arrived last week, is safe from the flaw. Very easy to reproduce the Zerodium Tor Browser 7.x NoScript bypass vulnerability #TorBrowser #vulnerability /k1mUJZUo77 A security researcher who goes by the name 'x0rz' has uploaded video of the vulnerability in action, and called it easy to reproduce.

Doing this can let a website that loads over the Tor browser to exploit the extension to run any Javascript code.

However, Zerodium learned of a flaw in NoScript when the extension is set on the highest safety level. Best Hosted Endpoint Protection and Security Software.

Tor browser reviews 2015