686 matches found
EUVD-2022-50667
Malicious code in bioql PyPI...
EUVD-2024-35414
Malicious code in bioql PyPI...
Brave Desktop 1.82.170 Security Fixes
Enhanced validation for hardware wallet bridge communication as reported on HackerOne by oblivionsage. Upgraded Chromium to 140.0.7339.186 — refer to Google Chrome advisories for inherited CVEs...
Malicious code in brave-real-launcher (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ec706dec762e96c2e6f2990c75a05808c5226fdd400419402135c910c5e639a5 The OpenSSF Package Analysis project identified 'brave-real-launcher' @ 1.0.10 npm as malicious. It is considered malicious because: - The packa...
MAL-2025-42142 Malicious code in brave-real-launcher (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ec706dec762e96c2e6f2990c75a05808c5226fdd400419402135c910c5e639a5 The OpenSSF Package Analysis project identified 'brave-real-launcher' @ 1.0.10 npm as malicious. It is considered malicious because: - The packa...
Malicious code in brave-real-launcher-v2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 122c2679d9d37502dadc2f4e54a52772fc880d7579ccefd7f530a9981e8e744c The OpenSSF Package Analysis project identified 'brave-real-launcher-v2' @ 1.0.3 npm as malicious. It is considered malicious because: - The...
MAL-2025-42137 Malicious code in brave-real-launcher-v2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 122c2679d9d37502dadc2f4e54a52772fc880d7579ccefd7f530a9981e8e744c The OpenSSF Package Analysis project identified 'brave-real-launcher-v2' @ 1.0.3 npm as malicious. It is considered malicious because: - The...
MAL-2025-17911 Malicious code in d3-brave-math (npm)
The package d3-brave-math was found to contain malicious code...
Malicious code in d3-brave-math (npm)
The package d3-brave-math was found to contain malicious code...
Brave Desktop 1.81.135 Security Fixes
Set clipboard sensitivity flag when copying Brave Wallet recovery code as reported on HackerOne by newfunction. Upgraded Chromium to 139.0.7258.127 — refer to Google Chrome advisories for inherited CVEs...
Brave Android 1.81.135 Security Fixes
Set clipboard sensitivity flag when copying Brave Wallet recovery code as reported on HackerOne by newfunction. Upgraded Chromium to 139.0.7258.127 — refer to Google Chrome advisories for inherited CVEs...
Brave Android 1.81.131 Security Fixes
Added clickjacking protection on DDNS interstitials as reported on HackerOne by newfunction. Upgraded Chromium to 139.0.7258.66 — refer to Google Chrome advisories for inherited CVEs...
CVE-2025-7710
The Brave Conversion Engine PRO plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 0.7.7. This is due to the plugin not properly restricting a claimed identity while authenticating with Facebook. This makes it possible for unauthenticated attackers t...
CVE-2025-7710
The Brave Conversion Engine PRO plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 0.7.7. This is due to the plugin not properly restricting a claimed identity while authenticating with Facebook. This makes it possible for unauthenticated attackers t...
CVE-2025-7710
CVE-2025-7710 affects the Brave Conversion Engine (PRO) WordPress plugin. The vulnerability is an authentication bypass arising from improper restriction of a claimed identity during Facebook authentication, enabling unauthenticated attackers to log in as other users, including administrators, in...
CVE-2025-7710 Brave Conversion Engine (PRO) <= 0.7.7 - Authentication Bypass to Administrator
The Brave Conversion Engine PRO plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 0.7.7. This is due to the plugin not properly restricting a claimed identity while authenticating with Facebook. This makes it possible for unauthenticated attackers t...
CVE-2025-7710 Brave Conversion Engine (PRO) <= 0.7.7 - Authentication Bypass to Administrator
The Brave Conversion Engine PRO plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 0.7.7. This is due to the plugin not properly restricting a claimed identity while authenticating with Facebook. This makes it possible for unauthenticated attackers t...
PT-2025-31738 · WordPress · Brave Conversion Engine
Name of the Vulnerable Software and Affected Versions: Brave Conversion Engine PRO plugin for WordPress versions through 0.7.7 Description: The Brave Conversion Engine PRO plugin for WordPress is susceptible to authentication bypass due to improper restriction of a claimed identity during Faceboo...
WordPress plugin Brave Conversion Engine 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
