📦 Vdesk

This vulnerability allows attackers to bypass two-factor authentication in LIVEBOX Collaboration vDesk by manipulating client-side verification of TOTP challenges. Attackers can modify API responses t...

This vulnerability allows authenticated remote users to upload dangerous file types without restrictions in LIVEBOX Collaboration vDesk's vShare web section. Attackers could upload malicious files lik...

This vulnerability in LIVEBOX Collaboration vDesk allows attackers to infer internal system state information through observable response discrepancies at specific API endpoints. It affects all users ...

This CVE describes a broken access control vulnerability in LIVEBOX Collaboration vDesk that allows authenticated SAML users to escalate privileges from low-privilege accounts to administrative roles....

This vulnerability allows attackers to bypass two-factor authentication in LIVEBOX Collaboration vDesk by generating backup codes before TOTP verification. It affects all users of vDesk through versio...