CVE-2012-3558

Opera before 11.65 is affected by CVE-2012-3558. The vulnerability arises because the address bar may not correspond to the displayed page during unusually timed changes, enabling user-assisted spoofing via navigation, reloads, and redirects. Connected sources corroborate multiple vulnerabilities...

CVE-2012-3556

Opera before 11.65 does not properly restrict the opening of a pop-up window in response to the first click of a double-click action, which makes it easier for user-assisted remote attackers to conduct cross-site scripting XSS attacks or execute arbitrary code via a crafted web site...

CVE-2012-3565

CVE-2012-3565 affects Opera prior to 12.00 Beta. The vulnerability allows remote attackers to cause an application crash (denial of service) by supplying crafted characters in domain names, as demonstrated by IDNA2008 tests. Multiple security repositories (NVD, OpenVAS entries) corroborate a MEDI...

CVE-2012-3557

CVE-2012-3557 affects Opera prior to 11.65. The issue is improper restriction in reading JSON strings, enabling a crafted site to trigger cross-domain loading of JSON resources and potentially disclose sensitive information. The vulnerability is associated with Opera’s JSON handling; affected pla...

CVE-2012-3560

CVE-2012-3560 affects Opera before 11.65. The issue is that the address bar may not correspond to the displayed page during blocked navigation, enabling remote spoofing attacks. Connected sources (Red Hat advisory, Opera changelogs) confirm the vulnerability in Opera prior to 11.65 and indicate t...

Opera 12 Local Arbitrary Download

Exploit for windows platform in category local exploits 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Cross-domain JSON resources may be exposed as JavaScript variable data

JSON strings are sometimes exported by sites as a resource that cannot be read cross-domain, and may contain confidential data. The format of a JSON string ensures that it cannot be read as the contents of a variable, if it is included as a normal script. In some cases, Opera does not correctly...

Opera 'X.509' Certificates Spoofing Vulnerability - Windows

Opera is prone to spoofing vulnerability SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.802435";...

Opera 'X.509' Certificates Spoofing Vulnerability - Linux

Opera is prone to a spoofing vulnerability SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.802436...

Cross-domain JSON resources may be exposed as JavaScript variable data – Opera Security Advisories

JSON strings are sometimes exported by sites as a resource that cannot be read cross-domain, and may contain confidential data. The format of a JSON string ensures that it cannot be read as the contents of a variable, if it is included as a normal script. In some cases, Opera does not correctly...

Opera 'X.509' Certificates Spoofing Vulnerability (Windows)

The host is installed with Opera and is prone to spoofing vulnerability OpenVAS Vulnerability Test $Id: gboperax509certspoofingvulnwin.nasl 5999 2017-04-21 09:02:32Z teissa $ Opera 'X.509' Certificates Spoofing Vulnerability Windows Authors: Antu Sanadi Copyright: Copyright c 2012 Greenbone...

Opera 'X.509' Certificates Spoofing Vulnerability (Linux)

The host is installed with Opera and is prone to spoofing vulnerability OpenVAS Vulnerability Test $Id: gboperax509certspoofingvulnlin.nasl 5888 2017-04-07 09:01:53Z teissa $ Opera 'X.509' Certificates Spoofing Vulnerability Linux Authors: Antu Sanadi Copyright: Copyright c 2012 Greenbone Network...

Opera 'X.509' Certificates Spoofing Vulnerability (Mac OS X)

The host is installed with Opera and is prone to spoofing vulnerability OpenVAS Vulnerability Test $Id: gboperax509certspoofingvulnmacosx.nasl 5956 2017-04-14 09:02:12Z teissa $ Opera 'X.509' Certificates Spoofing Vulnerability Mac OS X Authors: Antu Sanadi Copyright: Copyright c 2012 Greenbone...

Opera 'X.509' Certificates Spoofing Vulnerability - Mac OS X

Opera is prone to spoofing vulnerability SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.802437";...

Hidden keyboard navigation can allow cross site scripting or code execution – Opera Security Advisories

When a user is interacting with a window, that window should be visible to the user, to ensure that the user realizes it is there. If a page is displayed in a small enough window, the user may not realize it is being displayed, and if the right keyboard sequence is carefully followed, they can en...

CVE-2012-1251

Opera before 9.63 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

Opera before 9.63 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2012-1251

CVE-2012-1251 affects Opera before 9.63 and stems from improper verification of X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via crafted certificates. The vulnerability is documented across multiple sources (NVD entry referencing O...

CVE-2012-1251

Opera before 9.63 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Universal Browser Link Spoofing

Exploit for multiple platform in category remote exploits !/usr/bin/env python ''' 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local,...