openSUSE Security Update : opera (openSUSE-2017-232)

This update for opera fixes the following issues : Changes in opera : - Update to version 43.0.2442.806 : - See https://opera.com/blogs/desktop/changelog-for-43 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

Opera Mini - fast web browser - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Opera Mini - fast web browser published at the 'play' market has multiple vulnerabilities...

Facebook Adds FIDO U2F Security Keys Feature For Secure Logins

Hacking password for a Facebook account is not easy, but also not impossible. We have always been advising you to enable two-factor authentication — or 2FA — to secure your online accounts, a process that requires users to manually enter, typically a six-digit secret code generated by an...

CVE-2016-6908

Characters from languages are such as Arabic, Hebrew are displayed from RTL Right To Left order in Opera 37.0.2192.105088 for Android, due to mishandling of several unicode characters such as U+FE70, U+0622, U+0623 etc and how they are rendered combined with first strong character such as an IP...

Design/Logic Flaw

Characters from languages are such as Arabic, Hebrew are displayed from RTL Right To Left order in Opera 37.0.2192.105088 for Android, due to mishandling of several unicode characters such as U+FE70, U+0622, U+0623 etc and how they are rendered combined with first strong character such as an IP...

CVE-2016-6908

Characters from languages are such as Arabic, Hebrew are displayed from RTL Right To Left order in Opera 37.0.2192.105088 for Android, due to mishandling of several unicode characters such as U+FE70, U+0622, U+0623 etc and how they are rendered combined with first strong character such as an IP...

CVE-2016-6908

CVE-2016-6908 : In Opera for Android (version 37.0.2192.105088), mishandling of certain Unicode characters (e.g., U+FE70, U+0622, U+0623) can cause URLs to render in RTL order when combined with the first strong character (often an alphabetic character). This can enable address-bar display spoofi...

Facebook Touts 'Safer' Security Key Login

Facebook is giving privacy-minded users looking to fortify their accounts yet another layer of security. Brad Hill, a security engineer with the social network, announced on Facebook’s Security page on Thursday that effective immediately, it would let users tie a physical security key to their...

CVE-2016-6908: URL Redirection to Untrusted Site

Characters from languages are such as Arabic, Hebrew are displayed from RTL Right To Left order in Opera 37.0.2192.105088 for Android, due to mishandling of several unicode characters such as U+FE70, U+0622, U+0623 etc and how they are rendered combined with first strong character such as an IP...

PT-2017-9057

Name of the Vulnerable Software and Affected Versions Opera versions 37.0.2192.105088 Description The issue arises from the mishandling of certain Unicode characters, such as U+FE70, U+0622, U+0623, which can lead to a spoofed URL when combined with the first strong character, like an IP address ...

Opera Mini browser beta - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Opera Mini browser beta published at the 'play' market has multiple vulnerabilities...

PT-2017-1279

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 56.0.2924.76 for Linux, Windows and Mac Google Chrome version 56.0.2924.87 for Android Opera affected versions not specified Description The issue is related to the incorrect handling of object owner relationshi...

PT-2017-1274

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 56.0.2924.76 Opera versions prior to 56.0.2924.76 Description The issue is related to insufficient sanitization of DevTools URLs, which allowed a remote attacker who convinced a user to install a malicious...

PT-2017-1264

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 56.0.2924.76 Opera versions prior to 56.0.2924.76 Description The issue is caused by a lack of proper bounds checking in the FFmpeg component, which can lead to heap corruption. A remote attacker can potentially...

PT-2017-16263

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 56.0.2924.76 for Linux, Windows and Mac Google Chrome version 56.0.2924.87 for Android Opera affected versions not specified Description The issue is related to an insufficiently strict content security policy o...

PT-2017-1262

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 56.0.2924.76 for Linux, Windows and Mac Google Chrome version prior to 56.0.2924.87 for Android Opera affected versions not specified Description The issue is related to the Blink component in Google Chrome, whi...

PT-2017-1266

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 56.0.2924.76 for Linux, Windows and Mac Google Chrome version 56.0.2924.87 for Android Opera affected versions not specified Description The issue is related to the Blink component in Google Chrome, which failed...

Legacy Opera Presto source code appearance in online sharing sites

Security Legacy Opera Presto source code appearance in online sharing sites Share January 18th, 2017 Opera recently became aware that source code from our legacy browser engine, Presto, has appeared in some online code and file sharing sites. This code is the property of Opera Software and has be...

israel-opera.co.il XSS vulnerability

Vulnerable URL: http://www.israel-opera.co.il/Eng/?CategoryID=357%27"--!confirmOPENBUGBOUNTY%3C/script /K/=768' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 630901 VIP website...

Oracle Opera Session Hijacking Vulnerability

Oracle Opera is the United States Oracle Oracle company's set of hotel reservation and management system. A security vulnerability exists in Oracle Opera. An attacker could exploit this vulnerability to hijack a session...