PT-2015-7352

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 47.0.2526.73 Opera affected versions not specified Description The issue allows remote attackers to cause a denial of service out-of-bounds memory access or possibly have unspecified other impact via a PDF...

PT-2015-7342

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 47.0.2526.73 Opera affected versions not specified Description The issue allows remote attackers to bypass the Same Origin Policy via unspecified vectors. This is a different issue than the one previously...

PT-2015-7346

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 47.0.2526.73 Opera affected versions not specified Description The DOM implementation in Blink does not prevent javascript: URL navigation while a document is being detached. This allows remote attackers to bypa...

Misissued certificates

Security Misissued certificates Share October 29th, 2015 Recently, Google found a google.com pre-certificate in a CT log, without having ordered one. This lead to a series of incidents, also involving Opera and its security team. The backstory Google promptly contacted Symantec who had issued the...

Udemy: Reflected XSS and/or malicious redirection via JWPlayer 6 configuration modification

1 Malicious attacker by visiting course page e.g. https://www.udemy.com/overview-of-big-data-hadoop/ and intercepting browser's generated requests can find one to the following URL:...

PT-2015-2396

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 46.0.2490.71 Opera versions prior to 46.0.2490.71 Description The issue is related to a use-after-free vulnerability in the ServiceWorker implementation. This vulnerability can be exploited by a remote attacker ...

PT-2015-2397

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 46.0.2490.71 Opera affected versions not specified Description The issue is related to errors in the code of the PDFium component in Google Chrome. It allows a remote attacker to cause a denial of service or...

PT-2015-2402

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 46.0.2490.71 Opera affected versions not specified Description The issue is related to multiple unspecified vulnerabilities in the code of the affected software. These vulnerabilities can be exploited by attacke...

PT-2015-2401

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 46.0.2490.71 Opera affected versions not specified Description The issue is related to the CSSFontFaceSrcValue::fetch function in the Cascading Style Sheets CSS implementation in Blink. This function does not us...

PT-2015-2399

Name of the Vulnerable Software and Affected Versions libANGLE versions prior to 46.0.2490.71 Google Chrome versions prior to 46.0.2490.71 Opera versions prior to 46.0.2490.71 Description The issue is related to the Image11::map function in libANGLE, which mishandles mapping failures after...

PT-2015-2398

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 46.0.2490.71 Opera affected versions not specified Description The issue is related to the Blink component in Google Chrome and concerns weaknesses in access control mechanisms. It allows a remote attacker to...

PT-2015-7343

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 47.0.2526.73 Opera affected versions not specified Description The issue allows remote attackers to bypass the Same Origin Policy by leveraging a delay in window proxy clearing. This is due to a problem in the...

PT-2015-7339

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 47.0.2526.73 Opera affected versions not specified Description The issue is related to the BasicJsonStringifier::SerializeJSArray function in the JSON stringifier, which improperly loads array elements. This...

PT-2015-7344

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 47.0.2526.73 Opera affected versions not specified Description The DOM implementation allows remote attackers to bypass the Same Origin Policy via unspecified vectors. This issue is a different vulnerability tha...

Gentoo Security Advisory GLSA 201406-14

Gentoo Linux Local Security Checks GLSA 201406-14 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

PT-2015-2317

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 45.0.2454.101 Opera affected versions not specified Description The issue exists due to insufficient input validation in the Blink component of Google Chrome. Exploitation can allow a remote attacker to bypass...

PT-2015-2318

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 45.0.2454.101 Opera affected versions not specified Description The issue is related to insufficient access control in the Google V8 component of Google Chrome, allowing remote attackers to bypass the Same Origi...

Google Chrome 浏览器 45 本地拒绝服务漏洞

该漏洞于上周末前辈一个叫做Andris Atteka的家伙发现,他在博客中讲述了程序中的错误,并提交了漏洞报告如下。 如果你给某人发送URL:http://a/%%30%30,这会使他的 Chrome 浏览器或 Gtalk 网页版崩溃。 ——mdowd@mdowd2015年9月20日 我们已经在OS X El Capitan和Windows 10上的Chrome 45.0.2454.93版本分别进行了测试,结果显示都会受影响。Chromebooks,还有基于Chromium 45的Opera 32.0也会被这种URL搞崩溃。似乎只有安卓上的Chrome浏览器没事。...

Opera 31.0.1889.174 XSS Filter Bypass

Full Explanation Opera browser is a famous browser in internet and for this reason the opera company should secure the browser to users. one of this security issues is the Anti-XSS. The Anti-XSS stops executing javascript and today i'm going ro bypass it. Fist, make a vulnerable PHP file EX:...

PT-2015-1936

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 45.0.2454.85 Opera versions prior to 45.0.2454.85 Description The issue is related to errors in security settings in the RuntimeEventRouter::OnExtensionUninstalled function of the Google Chrome browser. This...