CVE-2017-8459

Brave 0.12.4 has a Status Bar Obfuscation issue in which a redirection target is shown in a possibly unexpected way. NOTE: third parties dispute this issue because it is a behavior that might have legitimate applications in for example the display of web-search results...

CVE-2017-8458

Brave 0.12.4 has a URI Obfuscation issue in which a string such as https://[email protected]/ is displayed without a clear UI indication that it is not a resource on the safe.example.com web site...

CVE-2017-8459

Brave 0.12.4 has a Status Bar Obfuscation issue in which a redirection target is shown in a possibly unexpected way. NOTE: third parties dispute this issue because it is a behavior that might have legitimate applications in for example the display of web-search results...

CVE-2017-8458

Brave 0.12.4 has a URI obfuscation vulnerability where a URL like https://[email protected]/ can be displayed without a clear indication it’s not under safe.example.com. Multiple sources (CNVD-2017-06046, NVD duplicate, CNVD entry) describe this as a Brave browser issue allowing...

CVE-2017-8458

Brave 0.12.4 has a URI Obfuscation issue in which a string such as https://[email protected]/ is displayed without a clear UI indication that it is not a resource on the safe.example.com web site...

PT-2017-18349 · Brave · Brave

Name of the Vulnerable Software and Affected Versions: Brave version 0.12.4 Description: The issue concerns a Status Bar Obfuscation problem where a redirection target is displayed in a potentially unexpected manner. This behavior might have legitimate uses, such as in the display of web-search...

CVE-2017-8458: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Brave 0.12.4 has a URI Obfuscation issue in which a string such as https://[email protected]/ is displayed without a clear UI indication that it is not a resource on the safe.example.com web site...

CVE-2017-8459: Undefined Security Weakness

Brave 0.12.4 has a Status Bar Obfuscation issue in which a redirection target is shown in a possibly unexpected way. NOTE: third parties dispute this issue because it is a behavior that might have legitimate applications in for example the display of web-search results...

PT-2017-18348

Name of the Vulnerable Software and Affected Versions Brave version 0.12.4 Description The issue is related to URI Obfuscation, where a string such as https://[email protected]/ is displayed without clear UI indication that it is not a resource on the safe.example.com web site...

Brave Software: homograph-attack (unicode vuln)

Hi team Summary: Affacted product appears identicaly different websites domains attacker uses unicode to register domains that look identical to real domains ,These fake domains can be used to fool users into signing into a fake website, thereby handing over their login credentials to an...

Brave Browser: Fast AdBlocker - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Brave Browser: Fast AdBlocker published at the 'play' market has multiple vulnerabilities...

Brave Browser iOS and Brave Browser Android Address Bar Spoofing Vulnerability

Brave Browser iOS and Brave Browser Android are both web browsers from Brave Software, USA. The former is for iOS; the latter is for Android. A security vulnerability exists in Brave Browser iOS versions prior to 1.2.18 and Brave Browser Android versions 1.9.56 and earlier. An attacker can exploi...

CVE-2016-9473

Brave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier suffer from Full Address Bar Spoofing, allowing attackers to trick a victim by displaying a malicious page for legitimate domain names...

CVE-2016-9473

Brave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier suffer from Full Address Bar Spoofing, allowing attackers to trick a victim by displaying a malicious page for legitimate domain names...

Design/Logic Flaw

Brave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier suffer from Full Address Bar Spoofing, allowing attackers to trick a victim by displaying a malicious page for legitimate domain names...

CVE-2016-9473

Brave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier suffer from Full Address Bar Spoofing, allowing attackers to trick a victim by displaying a malicious page for legitimate domain names...

CVE-2016-9473

CVE-2016-9473 affects Brave Browser on iOS (before 1.2.18) and Android (before 1.9.56). The vulnerability is described as a Full Address Bar Spoofing issue that allows an attacker to display a malicious page for legitimate domain names, potentially misleading users about the site they’re viewing....

CVE-2016-9473

Brave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier suffer from Full Address Bar Spoofing, allowing attackers to trick a victim by displaying a malicious page for legitimate domain names...

CVE-2016-9473: User Interface (UI) Misrepresentation of Critical Information

Brave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier suffer from Full Address Bar Spoofing, allowing attackers to trick a victim by displaying a malicious page for legitimate domain names...

PT-2017-10164

Name of the Vulnerable Software and Affected Versions Brave Browser iOS versions prior to 1.2.18 Brave Browser Android versions prior to 1.9.56 Description The issue allows attackers to trick victims by displaying a malicious page for legitimate domain names through Full Address Bar Spoofing...