Opera 5.12/6.0 Frame Location Same Origin Policy Circumvention Vulnerability

... Opera是一款由Opera Software开发和维护的WEB浏览器产品，可使用在Linux和Unix操作系统下，也可使用在Microsoft Windows操作系统下。 ... Opera在处理浏览器同源策略时存在漏洞，可导致远程攻击者在用户浏览器不同的帧中执行脚本代码。 ... Opera允许Javascript修改包含在文档中IFRAME或者FRAME的Location属性，如果一IFRAME或者FRAME的Location设置JavaScript:...

Opera <= 8.02 - Remote Denial of Service Exploit (2)

No description provided by source. !-- Vulnerable: Opera 8.2 Windows XP Prof. SP2 Tested opera.py ; opera opera.html [email protected] html = openopera.html, w html.writehtml style=\content: url0;\n html.writehead/head\n buff1 = 'A'32499 html.writebodyA\n+buff1+\n buff2 = 'B'153 html.writeu...

Opera Web Browser 7.0 - Remote IFRAME Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10081/info A denial of service vulnerability has been reported to affect Opera Web Browser. The issue is reported to present itself when Opera attempts to render IFRAME HTML tags that contain an invalid source argument. A...

Opera Browser 10.60 - Clickjacking Vulnerability

No description provided by source...

Opera Web Browser 7.54 KDE KFMCLIENT Remote Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11901/info It is reported that Opera for Linux is susceptible to a remote command execution vulnerability. This issue is due to a default configuration setting in Opera that utilizes the KDE 'kfmclient' utility to open...

Opera <= 11.51 Use After Free Crash PoC

No description provided by source. Exploit Title: Opera Use After Free - Crash PoC Date: 20 October 2011 Author: Roberto Suggi Liverani Software Link: www.opera.com Version: 11.51 and previous versions Tested on: Windows XP and Windows 7 CVE : n/a Link:...

Opera 6.0/7.0 opera.PluginContext Native Method Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6814/info Opera ships with a trusted Java class 'opera.PluginContext' that includes a native method that is reportedly prone to denial of service attacks. It is possible for a malicious Java applet to trigger this conditi...

Opera 9 Configuration Overwrite

No description provided by source. $Id: operaconfigoverwrite.rb 9938 2010-07-27 21:05:41Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...

Opera 7 Image Rendering HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6756/info It has been reported that, when generating HTML to display images or embedded media, Opera does not correctly format the provided URL or sufficiently encode URLs to local files. As a result of this lack of...

Mozilla 1.x,Opera 7.0 LiveConnect JavaScript Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7227/info A denial-of-service vulnerability has been reported to affect several browsers. The vulnerability occurs when executing certain malformed JavaScript-enabled pages. An attacker can exploit this vulnerability by...

opera web browser 7.54 java implementation Multiple Vulnerabilities (1)

No description provided by source. source: http://www.securityfocus.com/bid/11712/info Multiple remote vulnerabilities reportedly affect the Opera Web Browser Java implementation. These issues are due to the insecure proprietary design of the Web browser's Java implementation. These issues may...

Opera Web Browser 9.x History Search and Links Panel Cross Site Scripting Vulnerabilities

source: http://www.securityfocus.com/bid/31991/info Opera Web Browser is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...

Opera Web Browser 8.52 Stylesheet Attribute Buffer Overflow Vulnerability

source: http://www.securityfocus.com/bid/17513/info Opera is prone to a buffer-overflow vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied input before using it in a string-copy operation. This issue allows remote attackers to crash affected web...

Opera 7.11/7.20 HREF Malformed Server Name Heap Corruption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8853/info A vulnerability has been discovered in the Opera web browser that could lead to remote code execution. The problem is said to trigger when handling malformed HTML HREF values and may result in a buffer overrun...

SeaMonkey 1.1.8 - Remote Array Overrun

No description provided by source. From Full Disclosure: http://seclists.org/fulldisclosure/2009/Nov/221 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SeaMonkey 1.1.8 Remote Array Overrun Arbitrary code execution Author: Maksymilian Arciemowicz and sp3x http://SecurityReason.com Date: - - Dis.:...

Opera 7.x Relative Path Directory Traversal File Corruption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9279/info Opera is prone to a file corruption vulnerability. This issue is exposed when a user is presented with a file dialog, which will cause the creation of a temporary file. It is possible to specify a relative path ...

Opera 9.50, 9.61 historysearch - Command Execution

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ requir...

GLSA-201406-14 : Opera: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201406-14 Opera: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Opera. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a specially...

openSUSE Security Update : opera (openSUSE-SU-2014:0244-1)

Opera was upgraded to 12.16 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-136. The text description of this plugin is C SUSE LLC. include'deprecatednasllevel.inc';...

openSUSE Security Update : opera (openSUSE-SU-2011:1314-1)

opera was updated to version 11.60 to fix several security issues %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update opera-5529. The text description of this plugin is C SUSE LLC...