142 matches found
CVE-2022-29821
In JetBrains Rider before 2022.1 local code execution via links in ReSharper Quick Documentation was possible...
Jetbrains Rider 代码注入漏洞
JetBrains Rider is a cross-platform integrated development environment IDE from Czech company Jetbrains. versions prior to JetBrains Rider 2022.1 contain a code injection vulnerability that could be exploited by attackers to execute native code via a link in the ReSharper quick documentation...
rider-auto.com Cross Site Scripting vulnerability OBB-1422848
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Zomato: Ability to manipulate price with a max threshold of `<1 Rupee` in support rider parameter
Hi Team I have found an issue in support rider amount calculation at the time of checkout where the amount is tamperable by negative fraction of rupees which makes the total amount decreased by maximum of 1rs. POC - 1-Goto - zomato.com 2 - Add anything to your cart 3- At the checkout page , Add...
JetBrains Rider Data Forgery Issue Vulnerability
JetBrains Rider is a cross-platform .NET integrated development environment IDE from the Czech company JetBrains. A data forgery issue vulnerability exists in JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7. The vulnerability stems from a network system or product that does not adequatel...
Uber: Disclosure of Co-Rider user (Uber-pooling) profile picture at Amazon AWS Cloudfront within HTTP RESPONSE
After booking a shared ride, an attacker is able to access the profile picture of a co-rider. It is possible during the trip to view the co-rider's picture...
CVE-2020-7906
In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries provided by the Windows installer. This issue was fixed in release version 2019.3...
CVE-2020-7906
In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries provided by the Windows installer. This issue was fixed in release version 2019.3...
Code injection
In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries provided by the Windows installer. This issue was fixed in release version 2019.3...
CVE-2020-7906
JetBrains Rider for Windows had unsigned binaries in the installer during 2019.3 EAP2–EAP7; the issue was fixed in the 2019.3 release. Affected component: Windows installer binaries. Root cause: unsigned binaries were distributed with the Windows installer. Impact details are limited to the unsig...
CVE-2020-7906
In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries provided by the Windows installer. This issue was fixed in release version 2019.3...
JetBrains Security Bulletin Q4 2019
FYI Security JetBrains Security Bulletin Q4 2019 Robert Demmer In the fourth quarter of 2019, we resolved a series of security issues in our products. Here’s a summary report that contains a description of each issue and the version in which it was resolved. Product | Description | Severity |...
JetBrains Rider Code Issue Vulnerability
JetBrains Rider is a cross-platform .NET integrated development environment IDE from the Czech company JetBrains. A code issue vulnerability exists in JetBrains Rider versions prior to 2019.1.2. The vulnerability stems from an improperly designed or implemented code development process for a...
CVE-2019-14960
JetBrains Rider before 2019.1.2 was using an unsigned JetBrains.Rider.Unity.Editor.Plugin.Repacked.dll file...
CVE-2019-14960
JetBrains Rider before 2019.1.2 was using an unsigned JetBrains.Rider.Unity.Editor.Plugin.Repacked.dll file...
Design/Logic Flaw
JetBrains Rider before 2019.1.2 was using an unsigned JetBrains.Rider.Unity.Editor.Plugin.Repacked.dll file...
CVE-2019-14960
Affected product: JetBrains Rider. Issue: Rider before 2019.1.2 shipped with an unsigned JetBrains.Rider.Unity.Editor.Plugin.Repacked.dll, creating a potential trust/vector issue. Root cause: unsigned DLL in the Rider distribution (RIDER-27708 referenced in JetBrains Q2 2019 security bulletin). I...
CVE-2019-14960
JetBrains Rider before 2019.1.2 was using an unsigned JetBrains.Rider.Unity.Editor.Plugin.Repacked.dll file...
Xiaomi Electric Scooters Vulnerable to Life-Threatening Remote Hacks
Smart devices definitely make our lives easier, faster, and more efficient, but unfortunately, an insecure smart device can also ruin your day, or sometime could even turn into the worst nightmare of your life. If you are an electric scooter rider, you should be concerned about yourself. In a...
rider.foodpanda.hk XSS vulnerability
Open Bug Bounty ID: OBB-584704 Description| Value ---|--- Affected Website:| rider.foodpanda.hk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...