{"vulnerability": "cve-2021-39246", "sightings": [{"uuid": "982b572f-9b53-4ab5-ae73-82b38bc4d97b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39246", "type": "published-proof-of-concept", "source": "https://t.me/cKure/7313", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 CVE-2021-39246 \u2013 Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack excessive verbose logging \u2013 Windows, macOS, Linux\n\nhttps://sick.codes/sick-2021-111/", "creation_timestamp": "2021-09-26T06:30:57.000000Z"}, {"uuid": "8ad9770b-a9fa-4c6e-9b11-c2064b0fe09b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39246", "type": "seen", "source": "https://t.me/cibsecurity/29402", "content": "\u203c CVE-2021-39246 \u203c\n\nTor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack that can compromise the privacy of visits to v2 onion addresses. If --log or --verbose is used, exact timestamps of these onion-service visits are logged locally, and an attacker might be able to compare them to timestamp data collected by the destination server (or collected by a rogue site within the Tor network).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-24T22:31:02.000000Z"}, {"uuid": "0a0ac6c9-e1df-485d-99cd-b86b2b2e940c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39246", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4386", "content": "#exploit\n1. CVE-2021-39246:\nTor Browser through 10.5.6, 11.x through 11.0a4 allows a correlation attack excessive verbose logging - Windows, macOS, Linux\nhttps://sick.codes/sick-2021-111\n2. CVE-2020-10086:\nGitLab 10.4 - 12.8.1 - Directory Traversal\nhttps://github.com/Mochican/CVE-2021-10086", "creation_timestamp": "2021-09-27T13:09:13.000000Z"}, {"uuid": "51b954a3-72ed-4a13-98b2-70d5ae4a145b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39246", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1648", "content": "CVE-2021-39246 \u2013 Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack excessive verbose logging \u2013 Windows, macOS, Linux https://sick.codes/sick-2021-111/", "creation_timestamp": "2026-08-03T07:13:06.422888Z"}, {"uuid": "3532f2f5-68a9-4869-b71e-1e872c457af8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39246", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1648", "content": "CVE-2021-39246 \u2013 Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack excessive verbose logging \u2013 Windows, macOS, Linux https://sick.codes/sick-2021-111/", "creation_timestamp": "2026-08-04T00:00:47.858516Z"}, {"uuid": "7ad32715-330d-4a4c-8f5c-7ead91e9b836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39246", "type": "seen", "source": "https://t.me/reverseame/1648", "content": "CVE-2021-39246 \u2013 Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack excessive verbose logging \u2013 Windows, macOS, Linux https://sick.codes/sick-2021-111/", "creation_timestamp": "2026-07-29T12:02:53.462251Z"}, {"uuid": "e982d598-a792-4482-8a3b-413d5e1067a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39246", "type": "seen", "source": "https://t.me/reverseame/1648", "content": "CVE-2021-39246 \u2013 Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack excessive verbose logging \u2013 Windows, macOS, Linux https://sick.codes/sick-2021-111/", "creation_timestamp": "2026-07-30T00:02:43.811921Z"}, {"uuid": "21e036e3-1535-439c-b3d6-6f92e6ad0be2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39246", "type": "seen", "source": "https://t.me/cissp/4477", "content": "Blue Team Techniques\nDongTai - interactive application security testing (IAST) product that supports the detection of OWASP WEB TOP-10 vulnerabilities, multi-request related vulnerabilities (including logic vulnerabilities, unauthorized access vulnerabilities, etc.), third-party component vulnerabilities\nhttps://github.com/HXSecurity/DongTai\n\nexploit\n1. CVE-2021-39246:\nTor Browser through 10.5.6, 11.x through 11.0a4 allows a correlation attack excessive verbose logging - Windows, macOS, Linux\nhttps://sick.codes/sick-2021-111\n2. CVE-2020-10086:\nGitLab 10.4 - 12.8.1 - Directory Traversal\nhttps://github.com/Mochican/CVE-2021-10086\n\nOffensive security\n1. NTLM Relaying via Cobalt Strike\nhttps://rastamouse.me/ntlm-relaying-via-cobalt-strike\n2. EXOCET - AV-evading, undetectable, payload delivery tool\nhttps://github.com/tanc7/EXOCET-AV-Evasion\n\nThreat Research\nAutodiscover Attacks\nhttps://www.guardicore.com/labs/autodiscovering-the-great-leak\n]-> https://autodiscover-vulnerable-tlds.com\n\nMalware analysis\n1. Examining the Cring Ransomware Techniques\nhttps://www.trendmicro.com/en_us/research/21/i/examining-the-cring-ransomware-techniques.html\n2. Strings Analysis:\nVBA & Excel4 Maldoc\nhttps://isc.sans.edu/diary/27872\n\n\n\u200e\u200b", "creation_timestamp": "2026-09-01T17:00:39.384206Z"}, {"uuid": "7cf07af0-d213-442e-9d3b-4326f1d3cd66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39246", "type": "seen", "source": "https://t.me/cissp/4477", "content": "Blue Team Techniques\nDongTai - interactive application security testing (IAST) product that supports the detection of OWASP WEB TOP-10 vulnerabilities, multi-request related vulnerabilities (including logic vulnerabilities, unauthorized access vulnerabilities, etc.), third-party component vulnerabilities\nhttps://github.com/HXSecurity/DongTai\n\nexploit\n1. CVE-2021-39246:\nTor Browser through 10.5.6, 11.x through 11.0a4 allows a correlation attack excessive verbose logging - Windows, macOS, Linux\nhttps://sick.codes/sick-2021-111\n2. CVE-2020-10086:\nGitLab 10.4 - 12.8.1 - Directory Traversal\nhttps://github.com/Mochican/CVE-2021-10086\n\nOffensive security\n1. NTLM Relaying via Cobalt Strike\nhttps://rastamouse.me/ntlm-relaying-via-cobalt-strike\n2. EXOCET - AV-evading, undetectable, payload delivery tool\nhttps://github.com/tanc7/EXOCET-AV-Evasion\n\nThreat Research\nAutodiscover Attacks\nhttps://www.guardicore.com/labs/autodiscovering-the-great-leak\n]-> https://autodiscover-vulnerable-tlds.com\n\nMalware analysis\n1. Examining the Cring Ransomware Techniques\nhttps://www.trendmicro.com/en_us/research/21/i/examining-the-cring-ransomware-techniques.html\n2. Strings Analysis:\nVBA & Excel4 Maldoc\nhttps://isc.sans.edu/diary/27872\n\n\n\u200e\u200b", "creation_timestamp": "2026-09-02T01:04:24.696291Z"}]}