EUVD-2017-15608

Malware in sbrugna...

EUVD-2018-13129

Malware in sbrugna...

EUVD-2018-13130

Malware in sbrugna...

EUVD-2018-13131

Malware in sbrugna...

EUVD-2024-53723

Malicious code in bioql PyPI...

EUVD-2022-48081

Malicious code in bioql PyPI...

EUVD-2022-48076

Malicious code in bioql PyPI...

EUVD-2022-48080

Malicious code in bioql PyPI...

EUVD-2022-48078

Malicious code in bioql PyPI...

EUVD-2022-48088

Malicious code in bioql PyPI...

EUVD-2022-48082

Malicious code in bioql PyPI...

EUVD-2022-48079

Malicious code in bioql PyPI...

EUVD-2022-48086

Malicious code in bioql PyPI...

EUVD-2022-48083

Malicious code in bioql PyPI...

CVE-2022-45175

An issue was discovered in LIVEBOX Collaboration vDesk through v018. An Insecure Direct Object Reference can occur under the 5.6.5-3/doc/ID-FILE/c/N/C/websocket endpoint. A malicious unauthenticated user can access cached files in the OnlyOffice backend of other users by guessing the file ID of a...

CVE-2022-45177

An issue was discovered in LIVEBOX Collaboration vDesk through v031. An Observable Response Discrepancy can occur under the /api/v1/vdeskintegration/user/isenableuser endpoint, the /api/v1/sharedsearch?search=NAME+SURNAME endpoint, and the /login endpoint. The web application provides different...

CVE-2022-45172

An issue was discovered in LIVEBOX Collaboration vDesk before v018. Broken Access Control can occur under the /api/v1/registration/validateEmail endpoint, the /api/v1/vdeskintegration/user/adduser endpoint, and the /api/v1/registration/changePasswordUser endpoint. The web application is affected ...

CVE-2022-45180

An issue was discovered in LIVEBOX Collaboration vDesk through v018. Broken Access Control exists under the /api/v1/vdeskDOMAIN/export endpoint. A malicious user, authenticated to the product without any specific privilege, can use the API for exporting information about all users of the system a...

CVE-2022-45173

An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Bypass of Two-Factor Authentication can occur under the /api/v1/vdeskintegration/challenge endpoint. Because only the client-side verifies whether a check was successful, an attacker can modify the response, and fool the...

CVE-2022-45174

An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Bypass of Two-Factor Authentication for SAML Users can occur under the /login/backupcode endpoint and the /api/v1/vdeskintegration/challenge endpoint. The correctness of the TOTP is not checked properly, and can be bypassed by...