TGViewer
Hackerone Reports Hackerone Reports @hackeronereports · 243 subscribers
Post #732 16
🎯 New Report #3665151: Brave Shields Domain Reordering Leads to Origin Confusion
🔺Severity: Low
👽 Reporter: mousepadkalilinux12
⭐️ Reputation: 112
🛠 State: resolved
💼 Team: Brave Software
💵 Bounty: null
🕐 Submitted: 2026-04-10
⏰ Disclosed: 2026-04-13 19:59:26
📝 Summary: The Brave Shields feature was observed to reorder domain names, leading to potential origin confusion. Specifically, the domain "1.attacker.com" was displayed as "attacker.com.1", and "1.1.1.1.attacker.com" was displayed as "attacker.com.1.1.1.1". This behavior could potentially mislead users about the actual source of the website.
📂 Report JSON File: 3665151
@hackeronereports
More from @hackeronereports
  1. Oct 16, 2026🎯 New Report #3966599: Unauthenticated go-httpbin servers : Leads to Cookie Tossing on *.…
  2. Oct 16, 2026🎯 New Report #3730301: SQL Injection vulnerability found on IBM.com subdomain 🔺Severity:…
  3. Oct 16, 2026🎯 New Report #4028616: Memory exhaustion (DoS) via unbounded file read in `EncodingDiscov…
  4. Oct 15, 2026🎯 New Report #3972760: Open redirect on app.hey.com bypasses HEY desktop's internal-origi…
  5. Oct 15, 2026🎯 New Report #3972558: Burp Suite OpenAPI Event Log HTML injection triggers Windows SMB a…
  6. Oct 15, 2026🎯 New Report #3938927: An organization admin can create an attacker-controlled organizati…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →