Lucene search
+L

23 matches found

RedhatCVE
RedhatCVE
added 2026/07/10 7:54 p.m.8 views

CVE-2026-59180

A flaw was found in Apprise, an open-source library for sending notifications. HTTP-based notification plugins and HTTP attachment and configuration loaders in Apprise, prior to version 1.11.0, automatically follow HTTP redirects. During these redirects, user-configured authentication headers and...

3.1CVSS6.1AI score0.00195EPSS
Exploits0References7
OSV
OSV
added 2026/07/10 5:17 p.m.6 views

DEBIAN-CVE-2026-59180

Apprise is an open source library which allows you to send a notification to almost all of the most popular notification services available. Prior to 1.11.0, Apprise HTTP-based notification plugins and HTTP attachment and config loaders in apprise/attachment/http.py and apprise/config/http.py...

3.1CVSS6.1AI score0.00195EPSS
Exploits0References1
OSV
OSV
added 2026/07/10 5:17 p.m.9 views

UBUNTU-CVE-2026-59180

Apprise is an open source library which allows you to send a notification to almost all of the most popular notification services available. Prior to 1.11.0, Apprise HTTP-based notification plugins and HTTP attachment and config loaders in apprise/attachment/http.py and apprise/config/http.py...

3.1CVSS6.1AI score0.00195EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2026/07/10 4:2 p.m.9 views

CVE-2026-59180

Apprise is an open source library which allows you to send a notification to almost all of the most popular notification services available. Prior to 1.11.0, Apprise HTTP-based notification plugins and HTTP attachment and config loaders in apprise/attachment/http.py and apprise/config/http.py...

3.1CVSS6.1AI score0.00195EPSS
Exploits0
Cvelist
Cvelist
added 2026/07/10 4:2 p.m.31 views

CVE-2026-59180 Apprise forwards configured auth headers across cross-origin HTTP redirects

Apprise is an open source library which allows you to send a notification to almost all of the most popular notification services available. Prior to 1.11.0, Apprise HTTP-based notification plugins and HTTP attachment and config loaders in apprise/attachment/http.py and apprise/config/http.py...

3.1CVSS0.00195EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/07/10 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-59180

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apprise is an open source library which allows you to send a notification to almost all of the most popular notification services available. Prior to 1.11.0,...

3.1CVSS6.1AI score0.00195EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2021-0025

Malware in sbrugna...

7.5CVSS7.4AI score0.01891EPSS
Exploits1References8
NVD
NVD
added 2025/02/04 7:15 p.m.12 views

CVE-2025-24971

DumpDrop is a stupid simple file upload application that provides an interface for dragging and dropping files. An OS Command Injection vulnerability was discovered in the DumbDrop application, /upload/init endpoint. This vulnerability could allow an attacker to execute arbitrary code remotely wh...

9.5CVSS0.03124EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/02/04 6:53 p.m.15 views

CVE-2025-24971 OS Command Injection endpoint '/upload/init' parameter 'filename' (RCE) in DumpDrop

DumpDrop is a stupid simple file upload application that provides an interface for dragging and dropping files. An OS Command Injection vulnerability was discovered in the DumbDrop application, /upload/init endpoint. This vulnerability could allow an attacker to execute arbitrary code remotely wh...

9.5CVSS0.03124EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/02/04 12:0 a.m.6 views

PT-2025-5612 · Dumpdrop · Dumpdrop

Name of the Vulnerable Software and Affected Versions: DumpDrop affected versions not specified Description: The issue is related to an OS Command Injection vulnerability in the DumpDrop application, specifically in the "/upload/init" endpoint. This vulnerability could allow an attacker to execut...

9.5CVSS8AI score0.03124EPSS
Exploits0References10
NVD
NVD
added 2021/09/20 10:15 p.m.14 views

CVE-2021-39229

Apprise is an open source library which allows you to send a notification to almost all of the most popular notification services available. In affected versions users who use Apprise granting them access to the IFTTT plugin which just comes out of the box are subject to a denial of service attac...

7.5CVSS0.01891EPSS
Exploits1References3
OSV
OSV
added 2021/09/20 10:15 p.m.14 views

CVE-2021-39229

Apprise is an open source library which allows you to send a notification to almost all of the most popular notification services available. In affected versions users who use Apprise granting them access to the IFTTT plugin which just comes out of the box are subject to a denial of service attac...

7.5CVSS7.4AI score
Exploits0References3
Prion
Prion
added 2021/09/20 10:15 p.m.12 views

Design/Logic Flaw

Apprise is an open source library which allows you to send a notification to almost all of the most popular notification services available. In affected versions users who use Apprise granting them access to the IFTTT plugin which just comes out of the box are subject to a denial of service attac...

5CVSS7.4AI score0.01891EPSS
Exploits1References3Affected Software1
vulnersOsv
vulnersOsv
added 2021/09/20 10:15 p.m.7 views

apprise-transactions (=1.0.0) potentially affected by CVE-2021-39229 via apprise (=0.8.5)

apprise PYPI version =0.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on apprise and may be impacted: - apprise-transactions =1.0.0 Source cves: CVE-2021-39229 Source advisory: OSV:PYSEC-2021-327...

7.5CVSS7.1AI score0.01891EPSS
Exploits1
ATTACKERKB
ATTACKERKB
added 2021/09/20 10:15 p.m.3 views

CVE-2021-39229

Apprise is an open source library which allows you to send a notification to almost all of the most popular notification services available. In affected versions users who use Apprise granting them access to the IFTTT plugin which just comes out of the box are subject to a denial of service attac...

7.5CVSS7AI score0.01891EPSS
Exploits1References4Affected Software1
PyPA
PyPA
added 2021/09/20 10:15 p.m.8 views

PYSEC-2021-327

Apprise is an open source library which allows you to send a notification to almost all of the most popular notification services available. In affected versions users who use Apprise granting them access to the IFTTT plugin which just comes out of the box are subject to a denial of service attac...

7.5CVSS6.8AI score0.01891EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2021/09/20 10:15 p.m.16 views

PYSEC-2021-327

Apprise is an open source library which allows you to send a notification to almost all of the most popular notification services available. In affected versions users who use Apprise granting them access to the IFTTT plugin which just comes out of the box are subject to a denial of service attac...

7.5CVSS3.9AI score0.01891EPSS
Exploits1References3
Cvelist
Cvelist
added 2021/09/20 9:20 p.m.19 views

CVE-2021-39229 Regular expression deinal of service in apprise

Apprise is an open source library which allows you to send a notification to almost all of the most popular notification services available. In affected versions users who use Apprise granting them access to the IFTTT plugin which just comes out of the box are subject to a denial of service attac...

7.5CVSS7.6AI score0.01891EPSS
Exploits1References3
CVE
CVE
added 2021/09/20 9:20 p.m.80 views

CVE-2021-39229

CVE-2021-39229 affects the Apprise library via the IFTTT plugin (NotifyIFTTT.py). A denial-of-service vulnerability is caused by an inefficient regular expression, with the vulnerable pattern located at lines 356–359 in the referenced file. The issue was fixed in release 0.9.5.1; if upgrading isn...

7.5CVSS7.3AI score0.01891EPSS
Exploits1References3Affected Software1
vulnersOsv
vulnersOsv
added 2021/09/20 8:57 p.m.6 views

apprise-transactions (=1.0.0) potentially affected by CVE-2021-39229 via apprise (=0.8.5)

apprise PYPI version =0.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on apprise and may be impacted: - apprise-transactions =1.0.0 Source cves: CVE-2021-39229 Source advisory: OSV:GHSA-QHMP-H54X-38QR...

7.5CVSS7.2AI score0.01891EPSS
Exploits1
Rows per page
Query Builder