Mozilla and Opera information leak

By using localfiles object it's possible to obtain local files list. Under some conditions it' possible ot retrieve file content...

Disclosure of file system information in Mozilla Firefox and Opera Browser:

Title: Disclosure of file system information in Mozilla Firefox and Opera Browser Note: I don't know if it could be considered really a security problem, anyway i'll try to explain my ideas. Sorry for my bad english. Author: Giovanni Delvecchio Bug: Disclosure of file system information...

Java Vulnerabilities in Opera 7.54

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Illegalaccess.org Advisory: Opera 7.54 Java vulnerabilities Author: Marc Schnefeld, www.illegalaccess.org Summary Opera 7.54 is vulnerable to leakage of the java sandbox, allowing malicious applets to gain unacceptable privileges. This allows them to ...

Opera Web browser 7.54 java implementation - Multiple Vulnerabilities (2)

Opera Web browser 7.54 java implementation - Multiple Vulnerabilities 2 source: https://www.securityfocus.com/bid/11712/info Multiple remote vulnerabilities reportedly affect the Opera Web Browser Java implementation. These issues are due to the insecure proprietary design of the Web browser's Ja...

opera Web browser 7.54 java implementation - Multiple Vulnerabilities (3)

opera Web browser 7.54 java implementation - Multiple Vulnerabilities 3 source: https://www.securityfocus.com/bid/11712/info Multiple remote vulnerabilities reportedly affect the Opera Web Browser Java implementation. These issues are due to the insecure proprietary design of the Web browser's Ja...

Opera Web browser 7.54 java implementation - Multiple Vulnerabilities (4)

Opera Web browser 7.54 java implementation - Multiple Vulnerabilities 4 source: https://www.securityfocus.com/bid/11712/info Multiple remote vulnerabilities reportedly affect the Opera Web Browser Java implementation. These issues are due to the insecure proprietary design of the Web browser's Ja...

Opera Web browser 7.54 java implementation - Multiple Vulnerabilities (1)

Opera Web browser 7.54 java implementation - Multiple Vulnerabilities 1 source: https://www.securityfocus.com/bid/11712/info Multiple remote vulnerabilities reportedly affect the Opera Web Browser Java implementation. These issues are due to the insecure proprietary design of the Web browser's Ja...

opera Web browser 7.54 java implementation - Multiple Vulnerabilities (3)

source: https://www.securityfocus.com/bid/11712/info Multiple remote vulnerabilities reportedly affect the Opera Web Browser Java implementation. These issues are due to the insecure proprietary design of the Web browser's Java implementation. These issues may allow an attacker to craft a Java...

Opera Web browser 7.54 java implementation - Multiple Vulnerabilities (1)

source: https://www.securityfocus.com/bid/11712/info Multiple remote vulnerabilities reportedly affect the Opera Web Browser Java implementation. These issues are due to the insecure proprietary design of the Web browser's Java implementation. These issues may allow an attacker to craft a Java...

Opera Web browser 7.54 java implementation - Multiple Vulnerabilities (2)

source: https://www.securityfocus.com/bid/11712/info Multiple remote vulnerabilities reportedly affect the Opera Web Browser Java implementation. These issues are due to the insecure proprietary design of the Web browser's Java implementation. These issues may allow an attacker to craft a Java...

Opera Web browser 7.54 java implementation - Multiple Vulnerabilities (4)

source: https://www.securityfocus.com/bid/11712/info Multiple remote vulnerabilities reportedly affect the Opera Web Browser Java implementation. These issues are due to the insecure proprietary design of the Web browser's Java implementation. These issues may allow an attacker to craft a Java...

Opera < 7.55.0 Cross-Domain Dialog Box Spoofing

Binary data 2373.prm...

CVE-2004-1615

Opera allows remote attackers to cause a denial of service invalid memory reference and application crash via a web page or HTML email that contains a TBODY tag with a large COL SPAN value, as demonstrated by mangleme...

CVE-2004-0872

Opera does not prevent cookies that are sent over an insecure channel HTTP from also being sent over a secure channel HTTPS/SSL in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."...

Opera < 7.54.0 Empty CCCC Object JavaScript-based DoS

Binary data 2259.prm...

Opera < 7.54 Empty Embedded Object DoS

The version of Opera installed on the remote host contains a flaw that allows an attacker to crash this browser remotely. To exploit this flaw, an attacker would need to craft a rogue website containing an embedded 'CCCC' object with an empty 'src' tag in it and would need to lure a victim to vis...

Opera Web Browser 7.23 - Empty Embedded Object JavaScript Denial of Service

Opera Web Browser 7.23 - Empty Embedded Object JavaScript Denial of Service source: https://www.securityfocus.com/bid/11090/info Opera is a web browser available for a number of platforms, including Microsoft Windows, Linux and Unix variants and Apple MacOS. Opera Web Browser is reported to be...

Opera Web Browser 7.23 - Empty Embedded Object JavaScript Denial of Service

source: https://www.securityfocus.com/bid/11090/info Opera is a web browser available for a number of platforms, including Microsoft Windows, Linux and Unix variants and Apple MacOS. Opera Web Browser is reported to be susceptible to a JavaScript denial of service vulnerability. This vulnerabilit...

GLSA-200408-05 : Opera: Multiple new vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200408-05 Opera: Multiple new vulnerabilities Multiple vulnerabilities have been found in the Opera web browser. Opera fails to deny write access to the 'location' browser object. An attacker can overwrite methods in this object a...

GLSA-200405-19 : Opera telnet URI handler file creation/truncation vulnerability

The remote host is affected by the vulnerability described in GLSA-200405-19 Opera telnet URI handler file creation/truncation vulnerability The telnet URI handler in Opera does not check for leading '-' characters in the host name. Consequently, a maliciously-crafted telnet:// link may be able t...