CVE-2021-22916

Brave Desktop CVE-2021-22916 involves information disclosure when CNAME-based adblocking is used with a proxy extension; DNS requests can be issued via system DNS settings instead of the extension proxy, exposing potentially sensitive data. Connected sources corroborate: affected versions include...

Brave Browser Tor Window 安全漏洞

Brave Browser Tor Window is a software application. Achieve outstanding speed, security and privacy by blocking tracking programs. A security vulnerability exists in Brave Browser Tor Window that originates from leaking a user's real IP to an external DNS server...

PT-2021-15273 · Brave · Brave Desktop

Name of the Vulnerable Software and Affected Versions: Brave Desktop versions 1.17 through 1.26.60 Description: The issue occurs when adblocking is enabled and a proxy browser extension is installed in Brave Desktop. The CNAME adblocking feature makes DNS requests using the system DNS settings...

PT-2021-15274 · Brave · Brave Browser

Name of the Vulnerable Software and Affected Versions: Brave Browser Desktop versions 1.17 through 1.20 Description: The issue concerns information disclosure through DNS requests in Tor windows that do not flow through Tor when adblocking is enabled. Recommendations: For versions 1.17 through...

Brave 安全漏洞

Brave is a fast, private and secure web browser from Brave USA. A security vulnerability exists in Brave Desktop versions 1.17 - 1.26.60 that could lead to information disclosure...

Brave Software: Brave Browser permanently timestamps & logs connection times for all v2 domains ~/.config/BraveSoftware/Brave-Browser/tor/data/tor.log

Summary: A vulnerability in the Brave Browser v1.28.43 and below allows a local or physical attacker to view the exact timestamps that a user connected to a v2 onion address. A local or physical attacker could read /.config/BraveSoftware/Brave-Browser/tor/data/tor.log identify the exact moment a...

A week in security (June 21 – June 27)

Last week on Malwarebytes Labs: Want to stop ransomware attacks? Send the cybercriminals to jail, says Brian Honan: Lock and Code S02E11 Atomic research institute breached via VPN vulnerability Hotel staff bust Hermes SMS scammer with suspiciously large number of cables City of Liège hit by...

Brave takes aim at Google with privacy-first search engine

The privacy-forward web browser Brave launched its new search engine in beta on Wednesday, promising a more private experience that does not track user searches, build user profiles, or require the use of an external, pre-existing search index to deliver results. Clear from the company’s early...

Brave Software: DNS Leaks when using any VPN Browser extension with Brave Shield enabled

If Brave Shield is enabled alongside with a VPN Chrome extension and adblocking is enabled, some DNS requests may not be forwarded through the VPN tunnel...

Brave Software: XSS on Brave Today through custom RSS feed

A vulnerability was discovered in Brave iOS's custom RSS feed feature that allowed for cross-site scripting XSS attacks. Attackers could add a malicious RSS feed containing a javascript: URL, which could execute arbitrary code when a user clicked on a link in Brave Today. The vulnerability was...

Researcher release PoC exploit for 0-day in Chrome, Edge, Brave, Opera

By Deeba Ahmed The issue was demonstrated at the Pwn2Own 2021 hacking contest in which researchers won $100,000 for exploiting this flaw in Chrome and Edge. This is a post from HackRead.com Read the original post: Researcher release PoC exploit for 0-day in Chrome, Edge, Brave, Opera...

Privacy-First Browser Brave Is Launching a Search Engine

Unlike Google, Brave Search won’t track or profile people who use it...

CVE-2021-21323

Brave is an open source web browser with a focus on privacy and security. In Brave versions 1.17.73-1.20.103, the CNAME adblocking feature added in Brave 1.17.73 accidentally initiated DNS requests that bypassed the Brave Tor proxy. Users with adblocking enabled would leak DNS requests from Tor...

CVE-2021-21323

Brave is an open source web browser with a focus on privacy and security. In Brave versions 1.17.73-1.20.103, the CNAME adblocking feature added in Brave 1.17.73 accidentally initiated DNS requests that bypassed the Brave Tor proxy. Users with adblocking enabled would leak DNS requests from Tor...

Design/Logic Flaw

Brave is an open source web browser with a focus on privacy and security. In Brave versions 1.17.73-1.20.103, the CNAME adblocking feature added in Brave 1.17.73 accidentally initiated DNS requests that bypassed the Brave Tor proxy. Users with adblocking enabled would leak DNS requests from Tor...

CVE-2021-21323

Brave is an open source web browser with a focus on privacy and security. In Brave versions 1.17.73-1.20.103, the CNAME adblocking feature added in Brave 1.17.73 accidentally initiated DNS requests that bypassed the Brave Tor proxy. Users with adblocking enabled would leak DNS requests from Tor...

CVE-2021-21323

Brave Browser vulnerability CVE-2021-21323 involves a DNS leak tied to the CNAME-based adblocking feature. Affected: Brave Desktop/Brave browser versions 1.17.73–1.20.103. Root cause: the CNAME adblocking flow could initiate DNS requests that bypassed the Brave Tor proxy, causing DNS traffic from...

CVE-2021-21323 Regression in DNS leakage from Tor windows

Brave is an open source web browser with a focus on privacy and security. In Brave versions 1.17.73-1.20.103, the CNAME adblocking feature added in Brave 1.17.73 accidentally initiated DNS requests that bypassed the Brave Tor proxy. Users with adblocking enabled would leak DNS requests from Tor...

Brave Information Disclosure Vulnerability

Francois Marier Brave Core is a GlobalFrancois Marier open source application providing a set of changes, APIs and scripts for customizing Chromium to create Brave. A security vulnerability exists in Brave versions 1.17.73-1.20.103, which stems from a CNAME adblocking accidentally triggering a DN...

Brave browser Tor feature leaked .Onion queries to ISPs

By Waqas According to a researcher, the Chromium-based, privacy-focused Brave browser has a vulnerability that's leaking DNS requests. This is a post from HackRead.com Read the original post: Brave browser Tor feature leaked .Onion queries to ISPs...