Exploit acquisition firm Zerodium has disclosed a NoScript vulnerability that can be exploited to execute arbitrary JavaScript code in the Tor Browser even if the maximum security level is used.
http://feedproxy.google.com/~r/Securityweek/~3/tQyk5M9iQqA/zerodium-discloses-flaw-allows-code-execution-tor-browser
