PT-2015-1096

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 42.0.2311.90 Opera affected versions not specified Description The issue is related to a use-after-free vulnerability in the RenderFrameImpl::OnMessageReceived function. This vulnerability can be triggered by...

PT-2015-1104

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 42.0.2311.90 Opera affected versions not specified Description The issue is related to the SearchEngineTabHelper::OnPageHasOSDD function, which does not prevent the use of a file: URL for an OpenSearch descripto...

PT-2015-1106

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 42.0.2311.90 Opera affected versions not specified Description The issue involves multiple unspecified vulnerabilities that can be exploited by a remote attacker to cause a denial of service or possibly have oth...

PT-2015-1053

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 41.0.2272.118 Opera affected versions not specified Description The issue arises from incorrect interaction between IPC components, Gamepad API, and Google V8. This allows a remote attacker to execute arbitrary...

PT-2015-1054

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 41.0.2272.118 Opera versions prior to 41.0.2272.118 Description The issue is related to a race condition in the gpu/command buffer/service/gles2 cmd decoder.cc component, allowing remote attackers to cause a...

HackerOne: Reflected Filename Download

First of all congratulations on awesome bounty system. Big fan here! I found out that it's possible run a RFD attack on Hackerone. If we visit: https://hackerone.com/dsopas We see the normal HTML webpage. Nothing new here. But if we add ?format=json to the URL we can see the JSON file generated b...

PT-2015-1102

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 41.0.2272.76 Opera affected versions not specified Description A use-after-free issue in the OpenPDFInReaderView::Update function might allow user-assisted remote attackers to cause a denial of service heap memo...

Opera Installed (Mac OS X)

Binary data macosxoperainstalled.nbin...

Opera < 28.0.1750.40 SSL/TLS EXPORT_RSA Ciphers Downgrade MitM (Mac OS X) (FREAK)

The remote Mac OS X host has a version of the Opera web browser installed that is prior to 28.0.1750.40. It is, therefore, affected by a security feature bypass vulnerability, known as FREAK Factoring attack on RSA-EXPORT Keys, due to the support of weak EXPORTRSA cipher suites with keys less tha...

Dealing with FREAK and SuperFish

Security Dealing with FREAK and SuperFish Share March 10th, 2015 The FREAK TLS attack Following the trend of memorable names for TLS attacks, FREAK was recently announced. This exploits a bug in some TLS libraries, combined with the support of ancient weak ciphers, to enable a MitM to force...

PT-2015-5187

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 41.0.2272.76 Opera affected versions not specified Description The issue is related to an array index error in the MidiManagerUsb::DispatchSendMidiData function. This error can be triggered by providing an inval...

PT-2015-5181

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 41.0.2272.76 Opera affected versions not specified Description The issue is related to the DebuggerFunction::InitAgentHost function, which does not properly restrict what URLs are available as debugger targets...

PT-2015-5177

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 41.0.2272.76 Opera affected versions not specified Description The issue is related to multiple use-after-free vulnerabilities in the ServiceWorkerScriptCacheMap implementation. These vulnerabilities can be...

PT-2015-5184

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 41.0.2272.76 Opera affected versions not specified Description The issue arises from improper handling of a 407 HTTP status code accompanied by a Set-Cookie header in the net/http/proxy client socket.cc componen...

PT-2015-5185

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 41.0.2272.76 Opera affected versions not specified Description The issue is related to a name conflict in the getHiddenProperty function, which can be exploited by remote attackers to cause a denial of service o...

PT-2015-5182

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 41.0.2272.76 Opera affected versions not specified Description The issue is related to the DragImage::create function in Blink, which does not initialize memory for image drawing. This allows remote attackers to...

WhatsApp Web Client Now Available on Firefox and Opera Browsers

It's been a long time coming, but now the users of Firefox and Opera browsers don’t need to rely on the Chrome browser to access WhatsApp Web client, as the most popular smartphone messaging service has announced that the Web-based version of its service now works on Firefox and Opera web browser...

Optimizing encrypted video

Security Optimizing encrypted video Share February 25th, 2015 You might have seen our press release that Opera’s Rocket Optimizer can now optimize encrypted video streams. The attentive reader will already have halted and said, “wait, what?”. In this blog post, we’ll explain how this works. Rocke...

Facebook Launches Free Mobile Internet Service In India

Last year, the founder of the Social Network giant highlighted the future of universal Internet access, the dream that Facebook founder Mark Zuckerberg wants to fulfill — Making Internet access available to everyone across the world just like a service as essential as of 911 in the case of an...

PT-2015-5165

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 40.0.2214.111 Google Chrome on Android versions prior to 40.0.2214.109 Opera affected versions not specified Description The issue arises from the V8ThrowException::createDOMException function in the V8 bindings...