CVE-2018-16135 PoC — Opera Mini 安全漏洞

Source

https://github.com/5l1v3r1/CVE-2018-16135

Associated Vulnerability

Title:Opera Mini 安全漏洞 (CVE-2018-16135)
Description:Opera Mini是一款Web浏览器应用程序。 Opera Mini 47.1.2249.129326版本存在安全漏洞，该漏洞源于其允许远程攻击者通过精心制作的网站欺骗“位置权限”对话框。

Description

Opera Mini Location Permission Spoof Vulnerability

Readme


## Vulnerability

Opera Mini Location Permission Spoof Vulnerability

## Vulnerability Description

A location permission spoof vulnerability was discovered in opera mini 47.1.2249.129326 for Android which allows an attacker to spoof location permission dialog box origined from attackers website while being on any legit website. 

## CVE ID

CVE-2018-16135

## Vendor

https://www.opera.com/

## Disclosure Timeline

02 August 2018 - Reported to vendor

18 August 2018 - Patch confimration received from vendor

## Credits

Nikhil Mittal 

## Advisory

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16135

File Snapshot


 [4.0K]  /data/pocs/41c46c5621a378649fa331cb0b9297fde63bcb7c
└── [ 618]  README.md

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!