漏洞目录
15,219 份公开披露报告，按弱点、厂商与发现过程组织。每条记录保留原文溯源，不做无依据的复述。
15,219公开报告
245弱点类型
428厂商
$4,934,915披露赏金
筛选结果 117 份 · 本页赏金 $0 · 清除筛选
漏洞类别
弱点目录
- 信息泄露1,447信息泄露
- XSS（通用）985跨站脚本
- Unlabeled967其他弱点
- 认证缺陷（通用）790身份认证
- 访问控制缺陷（通用）772访问控制
- 反射型 XSS661跨站脚本
- 存储型 XSS643跨站脚本
- 违反安全设计原则（按标题归类）531错误配置
- 资源消耗失控526拒绝服务
- 跨站请求伪造511跨站请求伪造
- 权限提升455访问控制
- 业务逻辑错误392业务逻辑
- IDOR359不安全的直接对象引用
- 代码注入344代码执行
- 开放重定向344开放重定向
- 内存破坏（通用）320内存破坏
- SQL 注入313SQL 注入
- SSRF293服务端请求伪造
- 路径遍历243路径遍历
- 命令注入（通用）234代码执行
- 密码学问题（通用）188密码学缺陷
- DOM 型 XSS178跨站脚本
- Unlabeled145信息泄露
- 点击劫持140错误配置
主要厂商目录 · 16
最新报告
- unclaimed s3 bucket takeover in the 3 js file located on the github page of brave softwareBrave Software · 业务逻辑 · 2021-09-24无赏金低危
- Brave Browser permanently timestamps & logs connection times for all v2 domains ~/.config/BraveSoftware/Brave-Browser/tor/data/tor.logBrave Software · 信息泄露 · 2021-08-16无赏金低危
- DNS Leaks when using any VPN Browser extension with Brave Shield enabledBrave Software · 信息泄露 · 2021-07-08 · CVE-2021-22916无赏金中危
- XSS on Brave Today through custom RSS feedBrave Software · 跨站脚本 · 2023-06-22无赏金低危
- Onion-Location header allows to open arbitrary URLs including chrome:Brave Software · 错误配置 · 2023-06-22无赏金中危
- Brave Browser Tor Window leaks user's real IP to the external DNS serverBrave Software · 信息泄露 · 2021-06-17 · CVE-2021-22917无赏金中危
- Phishing/Malware site blocking on Brave iOS can be bypassed with trailing dot in hostnameBrave Software · 业务逻辑 · 2023-06-22无赏金低危
- Brave Browser potentially logs the last time a Tor window was usedBrave Software · 信息泄露 · 2020-11-04 · CVE-2020-8276无赏金低危
- Universal XSS through FIDO U2F register from subframeBrave Software · 跨站脚本 · 2023-06-22无赏金中危
- HTML injection in title of reader viewBrave Software · 跨站脚本 · 2023-06-22无赏金低危
- https://publishers.basicattentiontoken.org/favicon.ico is Vulnerable to CVE-2017-7529Brave Software · 内存破坏 · 2020-12-16 · CVE-2017-7529无赏金低危
- Arbitrary file download due to bad handling of Redirects in WebTorrentBrave Software · 代码执行 · 2022-06-30无赏金低危
- Redirecting users to malicious torrent-files/websites using WebTorrentBrave Software · 开放重定向 · 2022-06-30无赏金低危
- Arbitrary file download via "Save .torrent file" option can lead to Client RCE and XSSBrave Software · 代码执行 · 2022-06-30无赏金低危
- Cross-origin resource sharing misconfiguration (CORS)Brave Software · 访问控制 · 2020-09-04无赏金低危
- Cookie steal through content UriBrave Software · 身份认证 · 2021-04-22无赏金高危
- HTTP Request SmugglingBrave Software · 注入与走私 · 2020-06-04无赏金中危
- No rate limiting for confirmation email lead to email flooding and leads to enumeration of emails in publishers.basicattentiontoken.orgBrave Software · 信息泄露 · 2020-11-09无赏金低危
- Username Information Disclosure via Json response - Using parameter number IntruderBrave Software · 信息泄露 · 2020-06-04无赏金低危
- Stored XSS in localhost:* via integrated torrent downloaderBrave Software · 跨站脚本 · 2019-09-24 · CVE-2019-15782无赏金低危
- Link obfuscation bugBrave Software · 密码学缺陷 · 2019-08-12无赏金低危
- [Brave browser] WebTorrent has DNS rebinding vulnerabilityBrave Software · 信息泄露 · 2019-10-16无赏金低危
- DMARC RECORD MISSINGBrave Software · 其他弱点 · 2019-02-13无赏金低危
- Brave allows flash to follow 307 redirects to other origins with arbitrary content-typesBrave Software · 开放重定向 · 2018-12-12无赏金低危
- Field Day With Protocol HandlersBrave Software · 其他弱点 · 2018-12-17无赏金低危