206 matches found
Brave Software: Stored XSS in localhost:* via integrated torrent downloader
Summary: Due to filename of downloading torrent file isn't sanitized, an attacker is able to execute arbitrary JavaScript on localhost: by abusing crafted torrent file. Products affected: Brave 0.68.131 Chromium: 76.0.3809.100 Official Build Steps To Reproduce: 1. Open...
What is BAT and why you should install Brave Browser?
BAT is an Ethereum token that powers Brave Software's blockchain-based digital advertising platform. Internet users who browse the web using Brave's free web browser available at can choose to replace the ads they see with ads on Brave's ad network. Users then receive BAT from advertisers as...
Denial Of Service (DoS)
brave-browser is vulnerable to denial of service. A remote attacker is able to crash the application using a long alert argument due to mishandling of window dialogs...
Denial Of Service (DoS)
brave-browser is vulnerable to denial of service. An attacker is able to exploit a bug in the application by using a malicious script to close a non-existing tab. This causes the application to crash...
Brave Software: chrome://brave can still be navigated to, leading to RCE
Summary: 'chrome://brave' can be navigated to using the middle mouse click or normal click with CTRL held IFF coming from a bookmark. I am also using a small bug to actually trick a user into bookmarking our crafted URL through drag and drop. Products affected: Brave: 0.24.0 V8: 6.9.427.23 rev:...
Brave Software: URL spoofing using protocol handlers
Summary: Navigation to protocol handler changes URL in the address bar e.g. ssh://google.com in the address bar is standard behavior. Browsers change URL in the address bar to about:blank if a parent window tries to access the opened page with protocol handler URL. This behavior prevents URL...
Brave Software: Unsafe handling of protocol handlers
Summary: Brave browser macOS handles protocol handlers in unsafe way and differently from other browsers. Key differences between protocol handlers handling in Brave and other browsers: Open external app vs Open "Terminal" Brave only asks about opening external app. Other browsers e.g. Chrome ask...
CVE-2018-10798
A hang issue was discovered in Brave before 0.14.0 on, for example, Linux. The vulnerability is caused by mishandling of JavaScript code that triggers the reload of a page continuously with an interval of 1 second...
Brave denial of service vulnerability
Brave is a Web browser product from Brave Software, Inc. in the United States. A security vulnerability exists in versions of Brave prior to 0.14.0 on Linux or other platforms, which stems from a failure to properly handle long URLs and can be exploited to cause a denial of service application ha...
Brave Denial of Service Vulnerability (CNVD-2018-09308)
Brave is a Web browser product from Brave Software, Inc. in the United States. A security vulnerability exists in versions of Brave prior to 0.14.0 based on Linux or other platforms, which stems from the program's failure to properly handle JavaScrip code. An attacker could exploit this...
CVE-2018-10798
A hang issue was discovered in Brave before 0.14.0 on, for example, Linux. The vulnerability is caused by mishandling of JavaScript code that triggers the reload of a page continuously with an interval of 1 second...
CVE-2018-10799
A hang issue was discovered in Brave before 0.14.0 on, for example, Linux. This vulnerability is caused by the mishandling of a long URL formed by window.location+='?\u202a\uFEFF\u202b'; concatenation in a SCRIPT element...
Brave Browser Long Argument Denial Of Service
Exploit Title:Brave Browser...
Brave Browser window.close(self) Denial Of Service
Exploit Title:Brave Browser Brave Window Object Remote Denial of Service. Brave Window Object Remote Denial of Service Proof of Concept Click the below link to Trigger the Vulnerability.. Brave Window Object DoS Test POC...
Brave Browser < 0.13.0 - 'long alert() argument' Denial of Service
Exploit Title:Brave Browser...
Brave Browser < 0.13.0 - 'window.close(self)' Denial of Service
Exploit Title:Brave Browser Brave Window Object Remote Denial of Service. Brave Window Object Remote Denial of Service Proof of Concept Click the below link to Trigger the Vulnerability.. Brave Window Object DoS Test POC...
Brave Browser 0.13.0 - window.close(self) Denial of Service
Brave Browser 0.13.0 - window.closeself Denial of Service Exploit Title:Brave Browser Brave Window Object Remote Denial of Service. Brave Window Object Remote Denial of Service Proof of Concept Click the below link to Trigger the Vulnerability.. Brave Window Object DoS Test POC...
Brave Browser 0.13.0 - long alert() argument Denial of Service
Brave Browser 0.13.0 - long alert argument Denial of Service Exploit Title:Brave Browser...
Brave Browser < 0.13.0 - window.close(self) Denial of Service Exploit
Exploit for windows platform in category dos / poc Exploit Title:Brave Browser Brave Window Object Remote Denial of Service. Brave Window Object Remote Denial of Service Proof of Concept Click the below link to Trigger the Vulnerability.. Brave Window Object DoS Test POC 0day.today 2018-04-17...