14 matches found
EUVD-2026-84033
HomeBox is a home inventory and organization system. Prior to 0.26.0, NotifierRepository.Update in backend/internal/data/repo/reponotifier.go updates a notifier through UpdateOneIDid without requiring the record's user ID to match the authenticated user. An authenticated user who supplies another...
CVE-2026-48976 HomeBox: Cross-Tenant IDOR in Notifier Update Leaks Shoutrrr Credentials and Allows Webhook Hijack
HomeBox is a home inventory and organization system. Prior to 0.26.0, NotifierRepository.Update in backend/internal/data/repo/reponotifier.go updates a notifier through UpdateOneIDid without requiring the record's user ID to match the authenticated user. An authenticated user who supplies another...
PT-2026-96186
Name of the Vulnerable Software and Affected Versions HomeBox versions prior to 0.26.0 Description An authenticated user can update a notifier belonging to another tenant by providing the target notifier UUID to the 'PUT /v1/notifiers/id' endpoint. This occurs because the NotifierRepository.Updat...
GHSA-477V-W82M-634J Shoutrrr util package DoS via sending 2000, 4000, or 6000 character messages
The package github.com/containrrr/shoutrrr/pkg/util before 0.6.0 are vulnerable to Denial of Service DoS via the util.PartitionMessage function. Exploiting this vulnerability is possible by sending exactly 2000, 4000, or 6000 characters messages...
Shoutrrr util package DoS via sending 2000, 4000, or 6000 character messages
The package github.com/containrrr/shoutrrr/pkg/util before 0.6.0 are vulnerable to Denial of Service DoS via the util.PartitionMessage function. Exploiting this vulnerability is possible by sending exactly 2000, 4000, or 6000 characters messages...
AZL-31969 CVE-2022-25891 affecting package kured for versions less than 1.13.2-1
The package github.com/containrrr/shoutrrr/pkg/util before 0.6.0 are vulnerable to Denial of Service DoS via the util.PartitionMessage function. Exploiting this vulnerability is possible by sending exactly 2000, 4000, or 6000 characters messages...
Spoofing
The package github.com/containrrr/shoutrrr/pkg/util before 0.6.0 are vulnerable to Denial of Service DoS via the util.PartitionMessage function. Exploiting this vulnerability is possible by sending exactly 2000, 4000, or 6000 characters messages...
CVE-2022-25891 Denial of Service (DoS)
The package github.com/containrrr/shoutrrr/pkg/util before 0.6.0 are vulnerable to Denial of Service DoS via the util.PartitionMessage function. Exploiting this vulnerability is possible by sending exactly 2000, 4000, or 6000 characters messages...
CVE-2022-25891 Denial of Service (DoS)
The package github.com/containrrr/shoutrrr/pkg/util before 0.6.0 are vulnerable to Denial of Service DoS via the util.PartitionMessage function. Exploiting this vulnerability is possible by sending exactly 2000, 4000, or 6000 characters messages...
CVE-2022-25891
CVE-2022-25891 affects the Go package github.com/containrrr/shoutrrr/pkg/util in versions before 0.6.0. The DoS arises from PartitionMessage, exploitable by sending messages exactly 2000, 4000, or 6000 characters. Impact: availability (DoS) with network access; no confidentiality or integrity imp...
CVE-2022-25891
The package github.com/containrrr/shoutrrr/pkg/util before 0.6.0 are vulnerable to Denial of Service DoS via the util.PartitionMessage function. Exploiting this vulnerability is possible by sending exactly 2000, 4000, or 6000 characters messages...
PT-2022-17588
Name of the Vulnerable Software and Affected Versions github.com/containrrr/shoutrrr/pkg/util versions prior to 0.6.0 Description The issue is related to a Denial of Service DoS that can be triggered via the util.PartitionMessage function by sending messages of exactly 2000, 4000, or 6000...
shoutrrr 安全漏洞
shoutrrr is based on the JavaScript notification library. A security vulnerability exists in shoutrrr prior to version 0.6.0, which stems from a Denial of Service DoS vulnerability in package github.com/containrrr/shoutrrrr/pkg/util prior to version 0.6.0 via the util.PartitionMessage function. T...
CVE-2022-25891: Undefined Security Weakness
The package github.com/containrrr/shoutrrr/pkg/util before 0.6.0 are vulnerable to Denial of Service DoS via the util.PartitionMessage function. Exploiting this vulnerability is possible by sending exactly 2000, 4000, or 6000 characters messages...