686 matches found
CVE-2021-22929
An information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged warning messages that included timestamps of connections to V2 onion domains in tor.log...
Information disclosure
An information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged warning messages that included timestamps of connections to V2 onion domains in tor.log...
CVE-2021-22929
An information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged warning messages that included timestamps of connections to V2 onion domains in tor.log...
CVE-2021-22929
An information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged warning messages that included timestamps of connections to V2 onion domains in tor.log...
CVE-2021-22929
Brave Browser Desktop 1.28.62 and earlier versions are affected by CVE-2021-22929, an information disclosure where warning logs included timestamps of connections to V2 onion domains in tor.log. Root cause: on-disk logging of v2 onion service access warnings. Remediation: update Brave to 1.28.62 ...
Brave 日志信息泄露漏洞
Brave is a fast, private and secure web browser from Brave, Inc. Brave Browser Desktop 1.28.62 and earlier versions have a security vulnerability that could be exploited by attackers to obtain "V2 onion domains"...
Brave Software: unclaimed s3 bucket takeover in the 3 js file located on the github page of brave software
Summary: There is a unclaimed s3 bucket i.e brave-extensions.s3.amazonaws.com located in the 3 .js file on official brave software github page https://github.com/search?q=org%3Abrave+brave-extensions+language%3AJavaScript&type=Codethe attacker can takeover the bucket and create file that is used ...
PT-2021-15281 · Brave +1 · Brave Browser +1
Name of the Vulnerable Software and Affected Versions: Brave Browser Desktop versions prior to 1.28.62 Description: An information disclosure issue exists where logged warning messages include timestamps of connections to V2 onion domains in tor.log. This issue affects versions prior to 1.28.62,...
Fake Brave browser website dropped malware, thanks to Google Ads
By Waqas Threat actors used Google Ads to buy top search results on Google to advertise fake Brave browser websites which delivered malware as the browser's download file. This is a post from HackRead.com Read the original post: Fake Brave browser website dropped malware, thanks to Google Ads...
CVE-2021-22916
In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adblocking feature issues DNS requests that used the system DNS settings instead of the extension's proxy settings, resulting in possible information disclosure...
CVE-2021-22916
In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adblocking feature issues DNS requests that used the system DNS settings instead of the extension's proxy settings, resulting in possible information disclosure...
CVE-2021-22917
Brave Browser Desktop between versions 1.17 and 1.20 is vulnerable to information disclosure by way of DNS requests in Tor windows not flowing through Tor if adblocking was enabled...
CVE-2021-22917
Brave Browser Desktop between versions 1.17 and 1.20 is vulnerable to information disclosure by way of DNS requests in Tor windows not flowing through Tor if adblocking was enabled...
CVE-2021-22916
In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adblocking feature issues DNS requests that used the system DNS settings instead of the extension's proxy settings, resulting in possible information disclosure...
Information disclosure
In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adblocking feature issues DNS requests that used the system DNS settings instead of the extension's proxy settings, resulting in possible information disclosure...
CVE-2021-22917
Brave Browser Desktop between versions 1.17 and 1.20 is vulnerable to information disclosure by way of DNS requests in Tor windows not flowing through Tor if adblocking was enabled...
Information disclosure
Brave Browser Desktop between versions 1.17 and 1.20 is vulnerable to information disclosure by way of DNS requests in Tor windows not flowing through Tor if adblocking was enabled...
CVE-2021-22917
Brave Browser Desktop between versions 1.17 and 1.20 is vulnerable to information disclosure by way of DNS requests in Tor windows not flowing through Tor if adblocking was enabled...
CVE-2021-22917
Brave Browser Desktop versions 1.17–1.20 are affected by an information-disclosure vulnerability where DNS requests in Tor windows do not flow through Tor when adblocking is enabled, leaking the user’s real IP (and DNS queries) to external DNS servers/IPs. The Red Hat and other sources corroborat...
CVE-2021-22916
In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adblocking feature issues DNS requests that used the system DNS settings instead of the extension's proxy settings, resulting in possible information disclosure...