writeups.xyz writeups.xyz / Brave Software

Title Vulnerabilities Programs Authors
How I find open redirect in Facebook
CVE-2021-22929 – Brave Browser 1.27 and below permanently logs the server connection time for all v2 tor domains to ~/.config/BraveSoftware /Brave-Browser/tor/data/tor.log
Brave — Stealing your cookies remotely
How I found a Tor vulnerability in Brave Browser, reported it, watched it get patched, got a CVE (CVE-2020-8276) and a small bounty, all in one working day
CVE-2019-17004—Semi Universal XSS affecting Firefox for iOS
Brave Browser Script Blocker Bypass Vulnerability