https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 06 Jul 2026 16:31:48 +0000 https://vulnerability.circl.lu/sighting/d799d008-21d8-4794-9a73-a8585ef50377/export {"uuid": "d799d008-21d8-4794-9a73-a8585ef50377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-3P6J-M8J2-M6RC", "type": "seen", "source": "https://t.me/arpsyndicate/359", "content": "#ExploitObserverAlert\n\nGHSA-3p6j-m8j2-m6rc\n\nDESCRIPTION: Exploit Observer has 2 entries related to GHSA-3P6J-M8J2-M6RC. An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Bypass of Two-Factor Authentication for SAML Users can occur under the /login/backup_code endpoint and the /api/v1/vdeskintegration/challenge endpoint. The correctness of the TOTP is not checked properly, and can be bypassed by passing any string as the backup code.\n\nGHSS: 9.8", "creation_timestamp": "2023-11-22T17:10:36.000000Z"} {"uuid": "d799d008-21d8-4794-9a73-a8585ef50377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-3P6J-M8J2-M6RC", "type": "seen", "source": "https://t.me/arpsyndicate/359", "content": "#ExploitObserverAlert\n\nGHSA-3p6j-m8j2-m6rc\n\nDESCRIPTION: Exploit Observer has 2 entries related to GHSA-3P6J-M8J2-M6RC. An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Bypass of Two-Factor Authentication for SAML Users can occur under the /login/backup_code endpoint and the /api/v1/vdeskintegration/challenge endpoint. The correctness of the TOTP is not checked properly, and can be bypassed by passing any string as the backup code.\n\nGHSS: 9.8", "creation_timestamp": "2023-11-22T17:10:36.000000Z"} https://vulnerability.circl.lu/sighting/d799d008-21d8-4794-9a73-a8585ef50377/export Wed, 22 Nov 2023 17:10:36 +0000