Brave Software · disclosed reports
Misconfiguration and Insecure Design
18 disclosed reports · $0 paid
Out of date: the sync last ran 4 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. Reports open on HackerOne.
Open Brave Software on HackerOne- reports
- 18
- paid a bounty
- 0
Every one of the 18 is a mark on the map. Named now: 1 to 18, most upvoted first.
- Brave Shields Domain Reordering Leads to Origin Confusion
- Lack of quarantine meta-attribute for downloaded files leads to GateKeeper bypass
- Brave Android: Incorrect URL Eliding in Brave Shields Pop Up
- Onion-Location header allows to open arbitrary URLs including chrome:
- [iOS/Android] Address Bar Spoofing Vulnerability
- No rate limiting for confirmation email lead to email flooding and leads to enumeration of emails in publishers.basicattentiontoken.org
- Bypassing Homograph Attack Using /@ [ Tested On Windows ]
- Homograph Attack Bypass [ Tested on Linux & Windows ]
- Redirecting users to malicious torrent-files/websites using WebTorrent
- Homograph attack
- Phishing/Malware site blocking on Brave iOS can be bypassed with trailing dot in hostname
- [iOS] URL can be replaceState by blob URL in iOS Brave
- Address bar spoofing in Brave browser via. window close warnings
- invalid homepage URL causes 'uncaught typeerror' or blank state
- No user confirmation when an auto-updated extension gets more permissions
- Brave: Admin Panel Access
- Brave allows flash to follow 307 redirects to other origins with arbitrary content-types
- Arbitrary local code execution via DLL hijacking from executable installer
paid a bounty
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.