CVE-2016-10718

Summary: Brave Browser prior to 0.13.0 is affected by a denial-of-service (DoS) vulnerability. The issue allows a tab to close itself even if the tab was not opened by a script, which can crash the browser. Public PoC and reports describe exploiting the flaw with a window.close(self) trigger. Roo...

CVE-2017-18256: Undefined Security Weakness

Brave Browser before 0.13.0 allows remote attackers to cause a denial of service resource consumption via a long alert argument in JavaScript code, because window dialogs are mishandled...

PT-2018-6781

Name of the Vulnerable Software and Affected Versions: Brave Browser versions prior to 0.13.0 Description: The issue allows remote attackers to cause a denial of service due to resource consumption. This occurs when a long argument is passed to the alert function in JavaScript code, which is...

PT-2018-4887

Name of the Vulnerable Software and Affected Versions Brave Browser versions prior to 0.13.0 Description The issue allows a tab to close itself even if the tab was not opened by a script, resulting in denial of service. Recommendations For versions prior to 0.13.0, update to version 0.13.0 or lat...

CVE-2016-10718: Improper Input Validation

Brave Browser before 0.13.0 allows a tab to close itself even if the tab was not opened by a script, resulting in denial of service...

Brave Software: Cross domain tracking even with 3rd party cookies disabled.

Cross domain tracking Default settings from Brave browser has 3rd party cookies disabled. Which I am assuming also disables 3rd part storage like IndexedDB etc. Because of this protection it is not possible for a 3rd party to track users across multiple domains. But, Even though third-party cooki...

Brave Software: There is vulnebility Click Here TO fix

NOTE! Thanks for submitting a report! Please fill all sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to verify and then potentially issue a bounty. Summary: add summary of the vulnerability Products affected: operating system, Brave versi...

Brave Software: Bypassing Homograph Attack Using /@ [ Tested On Windows ]

Summary: Bypassing Homograph Attack Using /@ I look at on my previous report on 268984 and see patch code in the github https://github.com/brave/browser-laptop/commit/f2e438d6158fbc62e2641458b6002a72d223c366 I look at code at it'returns the punycode URL when given a valid URL', function...

New Tech Support Scam Freezes Chrome, Firefox & Brave Browser

By Waqas Another day, another tech support scam - This scam aims This is a post from HackRead.com Read the original post: New Tech Support Scam Freezes Chrome, Firefox & Brave Browser...

Brave Browser JS fingerprinting blocking component access control error vulnerability

Brave Browser is a web browser from Brave Software.JS fingerprinting blocking component is one of the "fingerprinting" blocking components of the browser. An access control vulnerability exists in the JS fingerprinting blocking component of Brave Browser version 0.19.73 and earlier. An attacker...

CVE-2017-1000461

Brave Software's Brave Browser, version 0.19.73 and earlier is vulnerable to an incorrect access control issue in the "JS fingerprinting blocking" component, resulting in a malicious website being able to access the fingerprinting-associated browser functionality that the browser intends to block...

Design/Logic Flaw

Brave Software's Brave Browser, version 0.19.73 and earlier is vulnerable to an incorrect access control issue in the "JS fingerprinting blocking" component, resulting in a malicious website being able to access the fingerprinting-associated browser functionality that the browser intends to block...

CVE-2017-1000461

Brave Software's Brave Browser, version 0.19.73 and earlier is vulnerable to an incorrect access control issue in the "JS fingerprinting blocking" component, resulting in a malicious website being able to access the fingerprinting-associated browser functionality that the browser intends to block...

CVE-2017-1000461

Brave Software's Brave Browser, version 0.19.73 and earlier is vulnerable to an incorrect access control issue in the "JS fingerprinting blocking" component, resulting in a malicious website being able to access the fingerprinting-associated browser functionality that the browser intends to block...

CVE-2017-1000461

Brave Software's Brave Browser, version 0.19.73 and earlier is vulnerable to an incorrect access control issue in the "JS fingerprinting blocking" component, resulting in a malicious website being able to access the fingerprinting-associated browser functionality that the browser intends to block...

CVE-2017-1000461

Brave Browser (0.19.73 and earlier) is affected by CVE-2017-1000461 due to an incorrect access-control flaw in the JS fingerprinting blocking component. This vulnerability could allow a malicious website to access fingerprinting-related browser functionality that the browser intends to block. The...

PT-2018-5228

Name of the Vulnerable Software and Affected Versions Brave Browser versions 0.19.73 and earlier Description The issue is related to an incorrect access control problem in the "JS fingerprinting blocking" component. This allows a malicious website to access browser functionality that is intended ...

CVE-2017-1000461: Incorrect Permission Assignment for Critical Resource

Brave Software's Brave Browser, version 0.19.73 and earlier is vulnerable to an incorrect access control issue in the "JS fingerprinting blocking" component, resulting in a malicious website being able to access the fingerprinting-associated browser functionality that the browser intends to block...

Brave Software: Torrent Viewer extension web service available on all interfaces

Summary: When files are downloaded via the Torrent Viewer, a local web service is spun up that allows the user to download the files. This web service listens on all interfaces, allowing anyone in the network to view what files are being downloaded, and download them from the user. This mostly...

Brave Software: Download of (later executed) .NET installer over insecure channel

NOTE! Thanks for submitting a report! Please fill all sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to verify and then potentially issue a bounty. Summary: Execution of file NDP-KB2901954-Web.exe fetched via...