PT-2018-17353

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 65.0.3325.146 Opera affected versions not specified Description A remote attacker could potentially enumerate internal host services via a crafted HTML page by including port 22 in the list of allowed FTP ports ...

PT-2018-17340

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 65.0.3325.146 Opera versions prior to 65.0.3325.146 Description A stack buffer overflow in Skia allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Recommendations For Goog...

PT-2018-17346

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 65.0.3325.146 Opera versions prior to 65.0.3325.146 Description The issue is related to the incorrect handling of specified filenames in file downloads, allowing a remote attacker to leak cross-origin data via a...

opera-guide.ch XSS vulnerability

Open Bug Bounty ID: OBB-569632 Description| Value ---|--- Affected Website:| opera-guide.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

opera-guide.ch XSS vulnerability

Open Bug Bounty ID: OBB-560452 Description| Value ---|--- Affected Website:| opera-guide.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2018-17330

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 64.0.3282.168 Opera versions prior to 64.0.3282.168 Description A type confusion issue could lead to a heap out-of-bounds write in V8, allowing a remote attacker to execute arbitrary code inside a sandbox via a...

PT-2018-17314

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 64.0.3282.119 Opera affected versions not specified Description The issue is related to an inappropriate implementation in the autofill feature, allowing a remote attacker to obtain autofill data with insufficie...

PT-2018-17328

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 64.0.3282.119 Description The issue is related to an inappropriate implementation in the New Tab Page of Google Chrome, allowing a local attacker to view website thumbnail images after clearing browser data. Thi...

PT-2018-17320

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 64.0.3282.119 Opera affected versions not specified Description The issue is related to insufficient policy enforcement in DevTools, allowing a remote attacker to potentially leak user local file data via a...

PT-2018-17312

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 64.0.3282.119 Opera affected versions not specified Description The issue is related to insufficient policy enforcement in DevTools, allowing a remote attacker to potentially leak user local file data via a...

Opera Mobile Browser for Android & iOS Blocks Cryptocurrency Mining

By Waqas Last month Opera introduced its browsers 50 beta version with This is a post from HackRead.com Read the original post: Opera Mobile Browser for Android iOS Blocks Cryptocurrency Mining...

Web browsers HSTS entries eraser

This module removes the HSTS database of the following tools and web browsers: Mozilla Firefox, Google Chrome, Opera, Safari and wget. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Web browse...

Opera mitigates critical CPU vulnerabilities

Security Opera mitigates critical CPU vulnerabilities Share January 4th, 2018 There is a lot of uncertainty right now about the impact of the hardware security issue named Meltdown. There will be a scheduled release of Opera which will contain a first set of workarounds as soon as the browser is...

NS International Train Tickets v7.31.4 Reflected XSS Vulnerability

Summary NS International Train Tickets is a web application that is used by NS International Dutch railways to manage search, book, plan, buy train tickets for international travels from the Netherlands. Description NS International Train Tickets confirmation page 'bookingConfirm' is vulnerable t...

Opera 50 Beta Version to Come with Cryptocurrency Mining Blocker

By Waqas Opera browser developers have good news for web users annoyed This is a post from HackRead.com Read the original post: Opera 50 Beta Version to Come with Cryptocurrency Mining Blocker...

PT-2017-14072

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 63.0.3239.108 Opera affected versions not specified Description The issue is related to an inappropriate implementation in V8 WebAssembly JS bindings, allowing a remote attacker to inject arbitrary scripts or HT...

PT-2017-3724

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 64.0.3282.119 Opera affected versions not specified Description: The issue is related to insufficient data validation in the Downloads component of Google Chrome, which can be exploited by a remote attacker to...

PT-2017-14061

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 63.0.3239.84 Opera versions prior to 63.0.3239.84 Description The issue is related to type confusion in WebAssembly in V8, which allows a remote attacker to potentially exploit heap corruption via a crafted HTML...

PT-2017-14056

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 63.0.3239.84 Opera affected versions not specified Description A heap buffer overflow issue in the Omnibox component of Google Chrome and Opera, related to the handling of PDF files by PDFium, allows a remote...

PT-2017-14058

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 63.0.3239.84 Opera affected versions not specified Description The issue allows a remote attacker to potentially exploit heap corruption via a crafted PDF file. This is due to a use after free in PDFium...