Malicious code in brave-research-participation-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aabb0d4d11817436c523cc8b6a7cec461ac62c46889ef22bddae8fb9a66a6e4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in brave-ios (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aacc360cc09bd65e62d9c77b71ca5869656bf12e6dfc5bd4af918c92fd090ed8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in brave-ledger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9f4c68463c1bdbbe469fe5c68d3f23d50379a0939a8f9155610ced839c30806 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in brave-core-crx-packager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d659bff6641ae2eba134b7096de9c5134287f99bb6aad5396c9f30be533d099 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1672 Malicious code in brave-eyeshade (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b98266ecc97d2f75d0205a22099ac12a97fe82560bebd28e28ee8713ec21778 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1671 Malicious code in brave-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc50cd5d32f408d873606c4837a20d8bbe471d478d7d7f5a1a2b21112eedfdab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in brave-eyeshade (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b98266ecc97d2f75d0205a22099ac12a97fe82560bebd28e28ee8713ec21778 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1668 Malicious code in brave-chromium-themes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d79eeeb9331ecccff7119c01e7502067dbecc674a2d97d5168e7aba1d126925d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in brave-bitgo-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc083f0135dbe25e14931c86c5bb99d26642341eca8c6ac96803a1fff4cec2ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1667 Malicious code in brave-bitgo-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc083f0135dbe25e14931c86c5bb99d26642341eca8c6ac96803a1fff4cec2ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1669 Malicious code in brave-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64124298f67bb4effd7c57f151d40e754666278b542f85d9f4f78b80309c5201 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in brave-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64124298f67bb4effd7c57f151d40e754666278b542f85d9f4f78b80309c5201 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in brave-chromium-themes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d79eeeb9331ecccff7119c01e7502067dbecc674a2d97d5168e7aba1d126925d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Brave Software: Browser is not following proper flow for redirection cause open redirect

Summary: Brave browser is not following proper flow for redirection. Browser is directly redirecting to the site that is present in redirect parameter without confirming from the main site server. I have found this vulnerability and this is affecting Facebook. Facebook use l.facebook.com/l.php?u=...

CVE-2022-30334

Brave before 1.34, when a Private Window with Tor Connectivity is used, leaks .onion URLs in Referer and Origin headers. NOTE: although this was fixed by Brave, the Brave documentation still advises "Note that Private Windows with Tor Connectivity in Brave are just regular private windows that us...

CVE-2022-30334

Brave before 1.34, when a Private Window with Tor Connectivity is used, leaks .onion URLs in Referer and Origin headers. NOTE: although this was fixed by Brave, the Brave documentation still advises "Note that Private Windows with Tor Connectivity in Brave are just regular private windows that us...

CVE-2022-30334

Brave before 1.34, when a Private Window with Tor Connectivity is used, leaks .onion URLs in Referer and Origin headers. NOTE: although this was fixed by Brave, the Brave documentation still advises "Note that Private Windows with Tor Connectivity in Brave are just regular private windows that us...

Design/Logic Flaw

Brave before 1.34, when a Private Window with Tor Connectivity is used, leaks .onion URLs in Referer and Origin headers. NOTE: although this was fixed by Brave, the Brave documentation still advises "Note that Private Windows with Tor Connectivity in Brave are just regular private windows that us...

CVE-2022-30334

Brave before 1.34, when a Private Window with Tor Connectivity is used, leaks .onion URLs in Referer and Origin headers. NOTE: although this was fixed by Brave, the Brave documentation still advises "Note that Private Windows with Tor Connectivity in Brave are just regular private windows that us...

CVE-2022-30334

Brave before 1.34 is affected: when using a Private Window with Tor Connectivity, onion URLs can leak in Referer and Origin headers. Root cause and impact are described across multiple sources for Brave prior to the 1.34 release. Impact is limited to leak of onion addresses in specific headers; n...