PT-2017-16301

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 60.0.3112.78 Opera affected versions not specified Description The issue is related to an inappropriate implementation in the Omnibox feature, allowing a remote attacker to spoof the contents of the Omnibox via ...

viettelappsclub.opera.com XSS vulnerability

Vulnerable URL: http://viettelappsclub.opera.com/store?categoryId=3"=See all Details: Description| Value ---|--- Patched:| Yes, at 30.08.2017 Latest check for patch:| 30.08.2017 07:00 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

Concrete CMS: Stored XSS vulnerability in RSS Feeds Description field

Intro "Pirates of the Crayons" Type of issue: Core CMS issue Level of severity: Internal Attack Vector Concrete5 version: 8.2.0 RC2 rev. b54f2b451f0a0804699c4cf9f0b3a8fef0e407db July 10th Summary There is Stored XSS vulnerability in RSS Feeds Description property. Value of the textarea is not...

Concrete CMS: Stored XSS in Name field in User Groups/Group Details form

Intro "The Crayons of Madagascar" Type of issue: Core CMS issue Level of severity: Internal Attack Vector Concrete5 version: 8.2.0 RC2 rev. 32c9daf352645d4fafedb7b956e7f2de4e153ab3 Summary There is Stored XSS vulnerability in User Groups-Group Details Name field. This vulnerability might be used ...

Concrete CMS: Stored XSS in Private Messages 'Reply' allows to execute malicious JavaScript against any user while replying to the message which contains payload

Intro "Back to the Crayons" Type of issue: Core CMS issue Level of severity: External Attack Vector Concrete5 version: 8.2.0 RC2 rev. 32c9daf352645d4fafedb7b956e7f2de4e153ab3 July 8th Summary There is Stored XSS vulnerability in Private Messages 'Reply' feature, when original message is quoted in...

My first working week with Opera Reborn

So, last Monday I changed my Chrome to the new Opera. It was an experiment to feel how is it “really” different from Chrome. I should mention before writing this post two important things about my background: 1. I was an Opera user since 2003 to 2010 and then moved to Chrome because of the many...

PT-2017-3188

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 60.0.3112.78 Opera versions prior to 60.0.3112.78 Description The issue is related to insufficient validation of untrusted input in PPAPI Plugins, which could allow a remote attacker to potentially perform a...

Opera browser - latest news - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Opera browser - latest news published at the 'play' market has multiple vulnerabilities...

PT-2017-3202

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 59.0.3071.86 Opera versions prior to 59.0.3071.86 Description The issue is related to a use after free in the credit card autofill mechanism, which can be exploited by a remote attacker using a specially crafted...

PT-2017-3199

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 59.0.3071.86 Opera versions prior to 59.0.3071.86 Description The issue is related to insufficient policy enforcement in the Omnibox feature of Google Chrome, allowing a remote attacker to perform domain spoofin...

PT-2017-3233

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 59.0.3071.86 for Linux, Windows, and Mac Google Chrome version prior to 59.0.3071.92 for Android Opera versions prior to 59.0.3071.86 Description The issue is related to a type confusion in the V8 JavaScript...

PT-2017-3229

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 59.0.3071.86 Opera versions prior to 59.0.3071.86 no specific version range provided, but implied to be affected by the same issue as Google Chrome Description A use after free issue in Chrome Apps, related to...

PT-2017-3201

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 59.0.3071.86 for Mac, Windows, and Linux Google Chrome version prior to 59.0.3071.92 for Android Opera affected versions not specified Description The issue is related to an inappropriate implementation in Blink...

PT-2017-3189

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 60.0.3112.78 Opera versions prior to 60.0.3112.78 Description A use after free in IndexedDB allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page, potentially impacting the...

Opera Max - Data manager - BSD license, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Opera Max - Data manager published at the 'play' market has multiple vulnerabilities...

Oracle Hospitality OPERA 5 Property Services Remote Vulnerability (CNVD-2017-08077)

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hotel management from Oracle Corporation. The solution provides human resource cost management, tracking and management of services throughout a customer's journey to improve customer...

Oracle Hospitality OPERA 5 Property Services Remote Vulnerability (CNVD-2017-08076)

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hotel management from Oracle Corporation. The solution provides human resource cost management, tracking and management of services throughout a customer's journey to improve customer...

PT-2017-3235

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 58.0.3029.96 Opera versions prior to 58.0.3029.96 Description The issue is caused by incorrect handling of picture ID in WebRTC, leading to a race condition that can be triggered by a remote attacker via a craft...

Opera Web Browser Address Bar Spoofing Vulnerability

Opera Mini and Opera Stable are both web browsers developed by the Norwegian company Opera Software. An address bar spoofing vulnerability exists in Opera Mini version 13 and Opera Stable version 36. A remote attacker can exploit this vulnerability to spoof the displayed URL with a specially...

CVE-2017-3573

Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications subcomponent: OPERA Printing. Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Easily "exploitable" vulnerability allows unauthenticated...