CVE-2010-1310

CVE-2010-1310 affects Opera 10.50, where crafted XSLT constructs can cause the browser to return cached contents of other pages, enabling information disclosure. Root cause: XSLT processing allows access to cached documents. Impact: remote attackers may obtain sensitive information. Exploitation ...

WordPress NextGEN Gallery Plugin <= 1.5.1 - XSS Vulnerability

This NextGEN Gallery plugin is prone to a cross-site scripting vulnerability. It is really popular plugin for the WordPress content management system, usually found as a blogging platform. The vulnerability manipulates the mode parameter of the xml/media-rss.php script and it results that...

Opera Web浏览器XSLT跨域信息泄露漏洞

BUGTRAQ ID: 38892 Opera是一款流行的WEB浏览器，支持多种平台。 正常情况下XSLT受到严格的控制以防独立站点的文档读取其他站点的内容。某些XSLT construct可能导致Opera从所生成的文档检索错误的内容，这些内容会随机的出现在缓存的之前访问页面中，其中可能包含有敏感信息。 Opera Software Opera 10.50 厂商补丁： Opera Software -------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.opera.com/browser/download/...

Opera 10.51 Closes HTTP Header Holes

Opera has announced the release of version 10.51 of its web browser for Windows-based systems, closing two “highly severe” security holes. The security and stability update addresses a previously reported vulnerability caused by an incorrectly set value in HTTP headers. Read the full article. The...

Opera < 10.51 Multiple Vulnerabilities

The version of Opera installed on the remote host is earlier than 10.51. Such versions are potentially affected by multiple issues : - Large values in the HTTP Content-Length header can be used to execute arbitrary code. 948 - XSLT can be used to retrieve random contents of unrelated documents. 9...

Opera < 10.51 Multiple Vulnerabilities

Binary data 5484.prm...

Opera < 10.51 Multiple Vulnerabilities

Binary data 800851.prm...

XSLT can be used to retrieve random contents of unrelated documents – Opera Security Advisories

XSLT can be used to retrieve random contents of unrelated documents – Opera Security Advisories OPCOM Team | March 18, 2010 Affected versions This vulnerability affects Opera 10.50. Severity Highly severe Description XSLT is normally subject to strict controls, preventing documents from separate...

HTTP Content-Length header can be used to execute arbitrary code – Opera Security Advisories

HTTP Content-Length header can be used to execute arbitrary code – Opera Security Advisories OPCOM Team | March 17, 2010 Affected versions This vulnerability affects Opera for Microsoft Windows. Severity Highly Severe Description Large values in the HTTP Content-Length header can cause Opera to...

HTTP Content-Length header can be used to execute arbitrary code

Large values in the HTTP Content-Length header can cause Opera to crash. Certain specific values can cause a memory corruption, which in some cases can allow arbitrary code to be injected and executed. In most cases Opera will just crash. To inject code, additional techniques will have to be...

CuteNews 1.4.6 Insecure Cookie Handling

======================================================================================== | Title : CuteNews 1.4.6 Insecure Cookie Handling Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site :...

Legacy Browsers

Microsoft Internet Explorer IE, is a series of graphical web browsers developed by Microsoft and included as part of the Microsoft Windows line of operating systems starting in 1995. It has been the most widely used web browser since 1999, attaining a peak of about 95% usage share during 2002 and...

Opera Bug Can Crash Browser

A security vulnerability identified in Opera can be exploited to crash users’ browsers, but probably can’t lead to the remote execution of malware, a company spokesman said. Read the full article. The Register...

Mozilla Firefox v3.6 and Opera Long String Crash(0day) Exploit

No description provided by source. code by Asheesh kumar Mani Tripathi email [email protected] company www.aksitservices.co.in Credit by Asheesh Anaconda Download www.mozilla.com/firefox Background Mozilla Firefox is a popular internet browser. .....: Vulnerability This bug is a typic...

Opera &lt;= 10.50 integer overflow

No description provided by source. ?php / @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ Opera 10.10 - 10.50 Title: Integer overflow leading to out of bounds array access R/W 0day poc Autor: Marcin Ressel aka echo Date: 3.03.2010 Software:...

Opera 10.50 - integer Overflow

Opera 10.50 - integer Overflow ?php / @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ ------------------------------------------------------------------------------- Opera 10.10 - 10.50 Title: Integer overflow leading to out of bounds array access R/W 0day poc Auto...

Opera <= 10.50 integer Buffer Overflow Exploit

Exploit for unknown platform in category dos / poc ============================================== Opera = 10.50 integer Buffer Overflow Exploit ============================================== ?php / @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ Opera 10.10 - 10.50...

Opera 10.50 - integer Overflow

?php / @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ ------------------------------------------------------------------------------- Opera 10.10 - 10.50 Title: Integer overflow leading to out of bounds array access R/W 0day poc Autor: Marcin Ressel aka echo Date:...

Opera Plenitude String Crash

======================================================================= Opera plenitude String Denial of Service Exploit ======================================================================= by Asheesh Kumar Mani Tripathi code by Asheesh kumar Mani Tripathi email [email protected]...

Opea 10.50 Integer Overflow

?php / @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ ....................../´¯/ ....................,/¯../ .................../..../ ............./´¯/'...'/´¯¯·¸ ........../'/.../..../......./¨¯\ ........'...´...´.... ¯/'...' ..........................'...../...