PT-2016-2078

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 50.0.2661.94 Opera affected versions not specified Description The issue is related to multiple unspecified vulnerabilities in the code. These vulnerabilities can be exploited by a remote attacker to cause a...

PT-2016-2079

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 50.0.2661.94 Opera affected versions not specified Description The issue is related to insufficient input validation, allowing remote attackers to cause a denial of service memory corruption or possibly have...

PT-2016-4891

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 50.0.2661.94 Opera affected versions not specified Description The issue is related to the gc callback.cc file in the extensions/renderer directory, which does not prevent fallback execution once the Garbage...

PT-2016-6288

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 50.0.2661.94 Opera affected versions not specified Description The issue allows remote attackers to bypass the Same Origin Policy and obtain sensitive information. This is related to the Skia component used in t...

PT-2016-4893

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 50.0.2661.94 Opera affected versions not specified Description The issue concerns the interaction between subframe forward navigations and other forward navigations, which can be mishandled by the...

PT-2016-4892

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 50.0.2661.94 Opera affected versions not specified Description The issue concerns the SerializedScriptValue::transferArrayBuffers function in the V8 bindings in Blink, which mishandles certain array-buffer data...

KLA11003 Spoofing user interface vulnerability in Opera products

CVSS: 5.8 Detect date: 04/23/2016 Severity: High Description: An address bar spoofing vulnerability was found in Opera Stable 36 and Opera Mini 13. By exploiting this vulnerability malicious users can spoof user interface the displayed URL. This vulnerability can be exploited remotely via a...

Opera Browser Now Offers Free and Unlimited Built-in VPN Service

In Brief Opera becomes the first web browser to offer a built-in Free, unlimited and 256-bit encrypted VPN service for everyone. Opera's Free VPN protects unencrypted browser session from leaking on public WiFi networks and will also let unblock firewalls to improve privacy and security. Virtual...

Thanks to the researchers 2016

Research Thanks to the researchers 2016 Share April 19th, 2016 A number of researchers and website testers have offered their assistance throughout the year to help us tighten the security of our many websites. Thanks to all! Special mention goes to those who discover and report security issues:...

Uber: XSS in uber oauth

Hi , I have found that when setting a redirecturi for an application you validate for the presence of :// in the beginning of the url , but you don't validate for the protocol and you don't block malicious protocols such as javascript: pseudo protocol and data: URIs. Although the redirecting is...

PT-2016-1737

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 50.0.2661.75 Opera affected versions not specified Description The issue is related to the LoadBuffer implementation in Google V8, which mishandles data types. This can be exploited by remote attackers using...

PT-2016-1732

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 50.0.2661.75 Opera versions prior to 50.0.2661.75 Description The issue arises from the incorrect reliance on GetOrigin method calls for origin comparisons in the Extensions subsystem. This allows remote attacke...

PT-2016-1735

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 50.0.2661.75 Opera affected versions not specified Description The issue is related to the use of memory after it has been freed, which can be exploited by remote attackers to cause a denial of service or possib...

PT-2016-1731

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 50.0.2661.75 Opera affected versions not specified Description The issue is related to multiple unspecified vulnerabilities in the code. These vulnerabilities can be exploited by a remote attacker to cause a...

PT-2016-1733

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 50.0.2661.75 Opera affected versions not specified Description The issue exists due to the mishandling of focus for certain about:blank pages by the WebContentsImpl::FocusLocationBarByDefault function. This can ...

PT-2016-1736

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 50.0.2661.75 Opera affected versions not specified Description The issue is related to the media subsystem in the browser, which does not initialize an unspecified data structure correctly. This can be exploited...

PT-2016-1738

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 50.0.2661.75 Opera versions prior to 50.0.2661.75 no specific version range provided Description A cross-site scripting XSS issue exists in the ModuleSystem::RequireForJsInner function, allowing remote attackers...

PT-2016-1739

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 50.0.2661.75 Opera affected versions not specified Description The issue is related to the incorrect implementation of the sycc420 to rgb and sycc422 to rgb functions in the fxcodec/codec/fx codec jpx opj.cpp...

King of Opera - Party Game! - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application King of Opera - Party Game! published at the 'play' market has multiple vulnerabilities...

Opera browser beta - Customized SSL, MIT license, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Opera browser beta published at the 'play' market has multiple vulnerabilities...