SPDY protocol <=3 协议信息泄露漏洞

CVE ID:CVE-2012-4930 SPDY是Google开发的基于传输控制协议TCP的应用层协议。 Mozilla Firefox, Google Chrome及其他多个产品使用的SPDY协议3，执行压缩数据加密时没有正确模糊未加密数据的长度，可通过中间人攻击的攻击者可通过提交一系列猜测请求，观察到压缩数据长度的变化也称CRIME攻击来获得明文HTTP头信息，造成敏感信息泄露如cookie信息。 0 SPDY protocol 3及之前版本 厂商解决方案 用户可参考如下供应商获得最新版本的产品： http://www.google.com/chrome...

First Signs of Google's Do Not Track Feature Begin to Surface on Chrome

Google Chrome is indeed getting a Do Not Track DNT feature according to source code published in the developer’s release of the browser at the end of last week. The feature should clear Google’s dev and beta channels before making its way into the next stable build of the browser before the end o...

CVE-2010-5227

Untrusted search path vulnerability in Opera before 10.62 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .htm, .mht, .mhtml, .xht, .xhtm, or .xhtl file. NOTE: some of these details are...

Design/Logic Flaw

Untrusted search path vulnerability in Opera before 10.62 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .htm, .mht, .mhtml, .xht, .xhtm, or .xhtl file. NOTE: some of these details are...

CVE-2010-5227

Opera before 10.62 is affected by an untrusted search path vulnerability that allows local privilege escalation via a Trojan horse dwmapi.dll placed in the attacker’s current working directory, as demonstrated by directories containing .htm, .mht, .mhtml, .xht, .xhtm, or .xhtl files. The issue ex...

CVE-2010-5227

Untrusted search path vulnerability in Opera before 10.62 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .htm, .mht, .mhtml, .xht, .xhtm, or .xhtl file. NOTE: some of these details are...

Opera < 12.02 Truncated Dialog Vulnerability

Binary data 800820.prm...

Opera < 12.02 Truncated Dialog Vulnerability

Binary data 6562.prm...

Opera Address Bar Spoofing Vulnerability (Windows)

This host is installed with Opera and is prone to address bar spoofing vulnerability. OpenVAS Vulnerability Test $Id: gboperaaddressbarspoofingvulnwin.nasl 6018 2017-04-24 09:02:24Z teissa $ Opera Address Bar Spoofing Vulnerability Windows Authors: Antu Sanadi Copyright: Copyright c 2012 Greenbon...

Opera Address Bar Spoofing Vulnerability - Windows

Opera is prone to address bar spoofing vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2012-4600

Cross-site scripting XSS vulnerability in Open Ticket Request System OTRS Help Desk 2.4.x before 2.4.14, 3.0.x before 3.0.16, and 3.1.x before 3.1.10, when Firefox or Opera is used, allows remote attackers to inject arbitrary web script or HTML via an e-mail message body with nested HTML tags...

CVE-2012-4600

Cross-site scripting XSS vulnerability in Open Ticket Request System OTRS Help Desk 2.4.x before 2.4.14, 3.0.x before 3.0.16, and 3.1.x before 3.1.10, when Firefox or Opera is used, allows remote attackers to inject arbitrary web script or HTML via an e-mail message body with nested HTML tags...

UBUNTU-CVE-2012-4600

Cross-site scripting XSS vulnerability in Open Ticket Request System OTRS Help Desk 2.4.x before 2.4.14, 3.0.x before 3.0.16, and 3.1.x before 3.1.10, when Firefox or Opera is used, allows remote attackers to inject arbitrary web script or HTML via an e-mail message body with nested HTML tags...

CVE-2012-4600

Cross-site scripting XSS vulnerability in Open Ticket Request System OTRS Help Desk 2.4.x before 2.4.14, 3.0.x before 3.0.16, and 3.1.x before 3.1.10, when Firefox or Opera is used, allows remote attackers to inject arbitrary web script or HTML via an e-mail message body with nested HTML tags...

OTRS Open Technology Real Services 3.1.8 / 3.1.9 XSS

!/usr/bin/python ''' Author: Mike Eduard - Znuny - Enterprise Services for OTRS Product: OTRS Open Technology Real Services Version: 3.1.8 and 3.1.9 Vendor Homepage: http://otrs.org CVE: 2012-4600 Timeline: 22 Aug 2012: Vulnerability reported to vendor and CERT 23 Aug 2012: Response received from...

OTRS Open Technology Real Services 3.1.8/3.1.9 - Cross-Site Scripting

!/usr/bin/python ''' Author: Mike Eduard - Znuny - Enterprise Services for OTRS Product: OTRS Open Technology Real Services Version: 3.1.8 and 3.1.9 Vendor Homepage: http://otrs.org CVE: 2012-4600 Timeline: 22 Aug 2012: Vulnerability reported to vendor and CERT 23 Aug 2012: Response received from...

CVE-2012-4010

Opera before 11.60 allows remote attackers to spoof the address bar via unspecified homograph characters, a different vulnerability than CVE-2010-2660...

Code injection

Opera before 11.60 allows remote attackers to spoof the address bar via unspecified homograph characters, a different vulnerability than CVE-2010-2660...

CVE-2012-4010

The CVE-2012-4010 entry concerns Opera prior to 11.60, enabling address bar spoofing via unspecified homograph characters (distinct from CVE-2010-2660). Public sources in the provided documents confirm this vulnerability affects the Opera browser and describe the impact as spoofing the address ba...

CVE-2012-4010

Opera before 11.60 allows remote attackers to spoof the address bar via unspecified homograph characters, a different vulnerability than CVE-2010-2660...