Browse / Brave Software

Brave Software

See its reports on the map

Attack surface: 417 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Brave Software

• Misconfiguration27
• Information Disclosure17
• Code Execution13
• Cross-site Scripting10
• Other weaknesses9
• Denial of Service9

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Torrent extension: Cross-origin downloading + "URL spoofing" + CSP-blocked XSSDuplicateCross-site Scripting (XSS) - Generic · medium
   12 votes
2. Command Execution because of extension handlingDuplicateCommand Injection - Generic · high
   8 votes
3. Subdomain Takeover of Brave.comDuplicateImproper Authentication - Generic
   7 votes
4. `alert()` dialogs on `chrome-extension://` origin (internal pages)Duplicatelow
   6 votes
5. Arbitrary local code execution via DLL hijacking from executable installerDuplicateViolation of Secure Design Principles · medium
   1 votes
6. homograph-attack (unicode vuln)DuplicateViolation of Secure Design Principles
   1 votes
7. Remote Stack Overflow Vulnerability (DoS)DuplicateUncontrolled Resource Consumption
   1 votes
8. Denial of service(POP UP Recursion) on Brave browserDuplicateUncontrolled Resource Consumption · medium
   1 votes