821 matches found
Brave Software: [iOS] URL can be replaceState by blob URL in iOS Brave
Summary: URL can be replace by blob URL using function history.replaceState Products affected: iOS brave version 1.3.117.02.14.11 Steps To Reproduce: - Add a html named "blob.html" which link is "http://192.168.1.111/blob.html" - And its source is:...
Brave Software: Address bar spoofing in Brave browser via. window close warnings
Hello, I would like to Report Address Bar spoofing vulnerability in Brave Browser on macOS. Summary: When people visit the poc page,I notice them to type a DNS record exist but cannot access domain "access.apple.com" to address bar.then window will popup a close warnings,then phishing is...
Brave Software: Brave payments remembers history even after clearing all browser data.
NOTE! Thanks for submitting a report! Please fill all sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to verify and then potentially issue a bounty. Summary: As a user you expect the browser to not persist data after clearing browser data...
Brave Software: No user confirmation when an auto-updated extension gets more permissions
Summary: In Chrome, when extensions are auto-updated, if the permissions change, the extension is preventatively disabled and the user has to confirm they wish to re-enable it with the additional permissions. While it appears Brave has a functioning Extension auto-updater e.g. for the PDF...
Brave Browser Address Bar Spoofing
Summary: Brave Browser Suffers from Address Bar Spoofing Vulnerability. Address Bar spoofing is a critical vulnerability in which any attacker can spoof the address bar to a legit looking website but the content of the web-page remains different from the Address-Bar display of the site. In Simple...
Brave Browser 1.2.16/1.9.56 - Address Bar URL Spoofing Vulnerability
Exploit for multiple platform in category dos / poc Brave Browser Suffers from Address Bar Spoofing Vulnerability. Address Bar spoofing is a critical vulnerability in which any attacker can spoof the address bar to a legit looking website but the content of the web-page remains different from the...
Brave Browser Address Bar Address Spoofing Vulnerability
Brave is an open source web browser based on Chromium. Brave Browser suffers from an address spoofing vulnerability in the address bar, which can be exploited by attackers to spoof addresses and perform unauthorized operations...
Brave Browser 1.2.161.9.56 - Address Bar URL Spoofing
Brave Browser 1.2.161.9.56 - Address Bar URL Spoofing Brave Browser Suffers from Address Bar Spoofing Vulnerability. Address Bar spoofing is a critical vulnerability in which any attacker can spoof the address bar to a legit looking website but the content of the web-page remains different from t...
Brave Browser 1.2.16/1.9.56 - Address Bar URL Spoofing
Brave Browser Suffers from Address Bar Spoofing Vulnerability. Address Bar spoofing is a critical vulnerability in which any attacker can spoof the address bar to a legit looking website but the content of the web-page remains different from the Address-Bar display of the site. In Simple words, t...
Brave Software: Sending arbitrary IPC messages via overriding Array.prototype.push
Summary: This bug is similar to 187542 and 188086. I found that also Array.prototype.push is exploitable. Tested on: Brave 0.12.12 Steps To Reproduce: 1. Go to this page: https://vulnerabledoma.in/brave/settingschange3.html Array.prototype.push=functione this0=functione,f...
Brave Software: Sending arbitrary IPC messages via overriding Function.prototype.apply
Summary: Brave Browser allows to overwrite the internal js code from the user js code. Using this behavior, an attacker can send arbitrary IPC messages and do UXSS, address bar spoofing, changing browser settings and so on. This bug is similar to 187542. Tested on: Brave 0.12.11 Steps To Reproduc...
Brave Software: Command Execution because of extension handling
Summary: Hello, Using this bug an attacker can execute commands as the current user using brave & gain complete shell capabilities and all possibilities associated Details: The issue is in the way the application handles website TLDs. typically in windows, .com represents an application, much...
Brave Software: Brave Browser unexpectedly allows to send arbitrary IPC messages
Summary: I found that Brave Browser allows to overwrite the internal js code from the user js code. Using this behavior, an attacker can send arbitrary IPC messages and do UXSS, address bar spoofing, changing browser settings and so on. Steps to Reproduce: 1 . An attacker overwrites...
Brave Software: links the user may download can be a malicious files
Hi, Summary: This vulnerability is pretty simple and pretty dangerous at the same time Almost any link the user tries to download it's extension is set according to the file extension in the path if the path is / then it download's it according to the domain name Eg: 1...
Brave Software: [DOS] denial of service using code snippet on brave browser
Summary: brave browser hangs due to no validation for a code snippet causing denial of service to users. Products affected: latest brave browser in linux Steps To Reproduce: code snippet:- 1 window.location+='?\u202a\uFEFF\u202b'; OR 2 window.location+='?'+window.location.toString.split'';" Note ...
Brave Software: Remote Stack Overflow Vulnerability (DoS)
Allows remote attackers to cause a denial of service application crash resulting in stack overflow via nested calls to the window.print javascript function. Remote Stack Overflow DoS PoC Remote Stack Overflow DoS PoC Execute! function crash window.print; crash; Poc : Please find attached file POC...
Brave Software: Denial of service(POP UP Recursion) on Brave browser
Summary: Basically I have found a denial of service attack on brave browser in Linux platform.In this bug when we open the html file or visiting www.tiks.host-ed.me then click on pop up dos.html ,which contains a recurring pop up code,the Pop up freezes the entire browser window except for minimi...
Brave Software: invalid homepage URL causes 'uncaught typeerror' or blank state
Summary: The issue is when you set the homepage as https://brave.com;https://google.com.vn and then change the setting to launch brave with homepage Products affected: Tested on windows7 x64 + BraveSetup-ia32 Steps To Reproduce: 1.go to Settings - General, inject to "My home page is":...
Brave Software: [ios] Address bar spoofing in Brave for iOS
Hey Summary: I've found an address bar spoofing vulnerability in the latest version of Brave for iOS. Products affected: Brave for iOS 1.2.16 Android maybe? PoC: html var spoof = function document.write"This is not Google"; document.location = "https://google.com:1234";...