Exploit vendor drops Tor Browser zero-day on Twitter