Security Links
The BuddyBoss Platform Pro plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.7.01. This is due to insufficient verification on the user being supplied during the Apple OAuth authenticate request through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email.
#ONION
Tor Stack Exchange

A question and answer site for researchers, developers, and users of Tor.

https://tor.stackexchange.com/
DeepWeb

Directory of onion sites in darkweb. Fresh and reliable list of dark web sites from search engines to chat rooms and forums.

https://deepweb.net/
NEW
Secure Drop

SecureDrop is an open-source whistleblower submission system that media organizations can install to securely accept documents from anonymous sources. It was originally coded by the late Aaron Swartz and is now managed by Freedom of the Press Foundation.

https://securedrop.org/directory/