196 matches found
EUVD-2018-13131
Malware in sbrugna...
EUVD-2018-13130
Malware in sbrugna...
EUVD-2017-15608
Malware in sbrugna...
EUVD-2018-13129
Malware in sbrugna...
EUVD-2022-48079
Malicious code in bioql PyPI...
EUVD-2022-48080
Malicious code in bioql PyPI...
EUVD-2022-48076
Malicious code in bioql PyPI...
EUVD-2024-53723
Malicious code in bioql PyPI...
EUVD-2022-48086
Malicious code in bioql PyPI...
EUVD-2022-48088
Malicious code in bioql PyPI...
EUVD-2022-48078
Malicious code in bioql PyPI...
EUVD-2022-48082
Malicious code in bioql PyPI...
EUVD-2022-48083
Malicious code in bioql PyPI...
EUVD-2022-48081
Malicious code in bioql PyPI...
CVE-2022-45175
An issue was discovered in LIVEBOX Collaboration vDesk through v018. An Insecure Direct Object Reference can occur under the 5.6.5-3/doc/ID-FILE/c/N/C/websocket endpoint. A malicious unauthenticated user can access cached files in the OnlyOffice backend of other users by guessing the file ID of a...
CVE-2022-45177
An issue was discovered in LIVEBOX Collaboration vDesk through v031. An Observable Response Discrepancy can occur under the /api/v1/vdeskintegration/user/isenableuser endpoint, the /api/v1/sharedsearch?search=NAME+SURNAME endpoint, and the /login endpoint. The web application provides different...
CVE-2022-45172
An issue was discovered in LIVEBOX Collaboration vDesk before v018. Broken Access Control can occur under the /api/v1/registration/validateEmail endpoint, the /api/v1/vdeskintegration/user/adduser endpoint, and the /api/v1/registration/changePasswordUser endpoint. The web application is affected ...
CVE-2022-45180
An issue was discovered in LIVEBOX Collaboration vDesk through v018. Broken Access Control exists under the /api/v1/vdeskDOMAIN/export endpoint. A malicious user, authenticated to the product without any specific privilege, can use the API for exporting information about all users of the system a...
CVE-2022-45173
An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Bypass of Two-Factor Authentication can occur under the /api/v1/vdeskintegration/challenge endpoint. Because only the client-side verifies whether a check was successful, an attacker can modify the response, and fool the...
CVE-2022-45174
An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Bypass of Two-Factor Authentication for SAML Users can occur under the /login/backupcode endpoint and the /api/v1/vdeskintegration/challenge endpoint. The correctness of the TOTP is not checked properly, and can be bypassed by...