Brave Software: Denial of service attack(window object) on brave browser

Summary: hey there, The Brave browser is vulnerable to window object based denial of service attack. The brave browser fails to sanitize a check when window.close function is called in number of dynamically generated events.. The function is called in a suppressed manner and kills the parent wind...

Brave Software: JavaScript URL Issues in the latest version of Brave Browser

Summary: The URL javascript: can redirect users to any site, instead of executing JavaScript. Additional Notes Found as partners by @kicker http://hackerone.com/kicker and myself @smelt. Products affected: The current version of Brave Browser on Windows. The current mobile version of Brave Browse...

Brave Software: Denial of service attack on Brave Browser.

Summary: Hey there, Basically,an HTML sent by an attacker to a victim can cause dos attackwhole system log's out when that file is opened by the victim in his brave browser.This vulnerability is occurring because browser is not able to handle the input passed in alert JavaScript function.This bug...

Brave Software: [Android] HTML Injection in BatterySaveArticleRenderer WebView

Summary: HTML Injection in BatterySaveArticleRenderer WebView. Products affected: Android Brave Browser 1.9.56 Steps To Reproduce: Open https://blackfan.ru/brave or html html location="https://www.google.com/search?q=Injection Wait for a full load Click on ArticleModeButton Supporting...

Brave Software: [iOS/Android] Address Bar Spoofing Vulnerability

Hello, I am Aaditya Purani, I would like to Report Address Bar spoofing vulnerability in Brave Browser on the IOS as well as Android Platform. All the Test have been carried out against Latest Brave Browser whose versions i have mentioned in Products affected section. Summary: Brave Browser Suffe...

Securing a travel iPhone

These are dry notes I took in the process of setting up a burner iPhone SE as a secure travel device. They are roughly in setup order. I believe iOS to be the most secure platform one can use at this time, but there are a lot of switches and knobs. This list optimizes for security versus...