Opera Web浏览器HTML注入及跨站脚本漏洞

BUGTRAQ ID: 31842 Opera是一款流行的WEB浏览器，支持多种平台。 Opera的9.61之前版本中的多个安全漏洞可能允许恶意用户执行脚本注入攻击、绕过某些安全限制或泄露敏感信息。 1 History Search功能没有正确地过滤某些输入，用户在查看恶意数据时可能在用户的浏览器会话中注入任意HTML和脚本代码，导致泄露之前所访问的页面。 2 实现Fast Forward功能中的错误可能允许通过特制的JavaScript URL在受限制的帧中执行任意脚本代码。 3 在预览新闻源期间时阻断脚本存在错误，可能导致泄露所订阅新闻源的内容，或将用户订阅到任意的新闻源。 Oper...

Opera <= 9.60 Stored Cross Site Scripting Vulnerability

No description provided by source. ======================================================================= = Opera Stored Cross Site Scripting Vulnerability = = Vendor Website: = http://www.opera.com = = Affected Version: = -- All desktop versions = = Public disclosure on 22nd October 2008 =...

Opera 9.52/9.60 Stored Cross Site Scripting Code Exec PoC

Exploit for unknown platform in category remote exploits ========================================================= Opera 9.52/9.60 Stored Cross Site Scripting Code Exec PoC ========================================================= bb var z=null; function x...

Opera 9.52/9.60 - Persistent Cross-Site Scripting Code Execution

bb var z=null; function x window.setTimeout"z=window.open'opera:historysearch?q=%2A';window.focus;",1500; window.setTimeout"z.close;",3000; window.setTimeout"location.href='mailto:'",3000; " onclick="x"Click me... s=document.createElement"IFRAME"; s.src="opera:config"; document.body.appendChilds;...

Opera 9.509.61 historysearch - Command Execution (Metasploit)

Opera 9.509.61 historysearch - Command Execution Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Opera 9.50/9.61 historysearch - Command Execution (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3...

Opera 9.529.60 - Persistent Cross-Site Scripting Code Execution

Opera 9.529.60 - Persistent Cross-Site Scripting Code Execution bb var z=null; function x window.setTimeout"z=window.open'opera:historysearch?q=%2A';window.focus;",1500; window.setTimeout"z.close;",3000; window.setTimeout"location.href='mailto:'",3000; " onclick="x"Click me...

Opera 9.60 - Persistent Cross-Site Scripting

Opera 9.60 - Persistent Cross-Site Scripting ======================================================================= = Opera Stored Cross Site Scripting Vulnerability = = Vendor Website: = http://www.opera.com = = Affected Version: = -- All desktop versions = = Public disclosure on 22nd October...

Opera 9.60 - Persistent Cross-Site Scripting

======================================================================= = Opera Stored Cross Site Scripting Vulnerability = = Vendor Website: = http://www.opera.com = = Affected Version: = -- All desktop versions = = Public disclosure on 22nd October 2008 =...

Opera <= 9.60 Stored Cross Site Scripting Vulnerability

Exploit for unknown platform in category remote exploits ======================================================= Opera = 9.60 Stored Cross Site Scripting Vulnerability ======================================================= ======================================================================= =...

openSUSE 10 Security Update : opera (opera-5709)

Opera 9.61 fixes several security vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update opera-5709. The text description of this plugin is C SUSE LLC...

opera-storedxss.txt

======================================================================= = Opera Stored Cross Site Scripting Vulnerability = = Vendor Website: = http://www.opera.com = = Affected Version: = -- All desktop versions = = Public disclosure on 22nd October 2008 =...

Opera < 9.61 Multiple Vulnerabilities

Binary data 4715.prm...

openSUSE 10 Security Update : opera (opera-5695)

This update of opera fixes several security problems. See: http://www.opera.com/docs/changelogs/linux/960/sec %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update opera-5695. The text description o...

Opera < 9.61 Multiple Vulnerabilities

The version of Opera installed on the remote host is earlier than 9.61 and thus reportedly affected by several issues : - It may be possible to reveal a user's browsing history by exploiting certain constructs in Opera's History Search results 903. - Opera's Fast Forward feature is affected by a...

opera -- multiple vulnerabilities

Opera reports: Certain constructs are not escaped correctly by Opera's History Search results. These can be used to inject scripts into the page, which can then be used to look through the user's browsing history, including the contents of the pages they have visited. These may contain sensitive...

FreeBSD : opera -- multiple vulnerabilities (fb84d5dd-9528-11dd-9a00-001999392805)

Opera reports : If a malicious page redirects Opera to a specially crafted address URL, it can cause Opera to crash. Given sufficient address content, the crash could cause execution of code controlled by the attacking page. Once a Java applet has been cached, if a page can predict the cache path...

Opera Web Browser URI重定向远程代码执行漏洞

BUGTRAQ ID: 31631 CNCAN ID：CNCAN-2008100914 Opera是一款开放源代码的WEB浏览器。 Opera存在设计问题，远程攻击者可以利用漏洞以应用程序权限执行任意命令。 如果恶意页面重定向Opera到一个特殊构建的URL地址，可导致Opera崩溃，给定足够的地址内容，可能导致任意代码执行。 Opera Software Opera Web Browser 8.51 Opera Software Opera Web Browser 8.50 Opera Software Opera Web Browser 8.0.2 Opera Software...

Opera缓存Java Applet特权提升漏洞

BUGTRAQ ID: 31643 CNCAN ID：CNCAN-2008100913 Opera是一款开放源代码的WEB浏览器。 Opera存在安全绕过问题，远程攻击者可以利用漏洞执行缓存的Java Applet。 一旦Java Applet被缓存后，如果页面可预测Applet的缓存路径，可导致从缓存中装载Applet，导致以本地机器上下文执行。这可导致读取系统其他缓存文件或执行一些通常条件下受限操作。这些文件可包含敏感文件发送给攻击者。 Opera Software Opera Web Browser 8.51 Opera Software Opera Web Browser 8.5...

Opera Web Browser 8.51 - URI redirection Remote Code Execution

source: https://www.securityfocus.com/bid/31631/info Opera Web Browser is prone to a remote code-execution vulnerability. Successfully exploiting this issue will allow attackers to execute arbitrary code within the context of the affected application or cause a denial-of-service condition. NOTE:...