https://vulnerability.circl.lu/sightings/feed 2026-07-06T16:31:47.945251+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/d799d008-21d8-4794-9a73-a8585ef50377/export 2026-07-06T16:31:47.957283+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d799d008-21d8-4794-9a73-a8585ef50377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-3P6J-M8J2-M6RC", "type": "seen", "source": "https://t.me/arpsyndicate/359", "content": "#ExploitObserverAlert\n\nGHSA-3p6j-m8j2-m6rc\n\nDESCRIPTION: Exploit Observer has 2 entries related to GHSA-3P6J-M8J2-M6RC. An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Bypass of Two-Factor Authentication for SAML Users can occur under the /login/backup_code endpoint and the /api/v1/vdeskintegration/challenge endpoint. The correctness of the TOTP is not checked properly, and can be bypassed by passing any string as the backup code.\n\nGHSS: 9.8", "creation_timestamp": "2023-11-22T17:10:36.000000Z"} 2023-11-22T17:10:36+00:00