obsidian-note-toolbar-PoC

propNAME → js: 변수 체인을 통한 Note Toolbar의 Frontmatter 기반 임의 코드 실행 CVE 상태: 요청됨, 할당 대기 중. 이 발견은 GHSA-q8cw-3m8c-5pf2로 공개되었습니다. CVE가 할당되면 이 저장소는 CVE-YYYY-NNNNN-obsidian-note-toolbar-PoC로 이름이 변경되고 이 배너는 CVE 링크로 대체됩니다...

supernote-obsidian-plugin-PoC

요약 CVE 상태: 요청됨, 할당 대기 중. 이 취약점은 GHSA-3gx3-r874-5pp4로 공개되었습니다. CVE가 할당되면 이 저장소는 CVE-YYYY-NNNNN-supernote-obsidian-plugin-PoC로 이름이 변경되고 이 배너는 CVE 링크로 교체됩니다...

CVE-2025-58401

Obsidian GitHub Copilot Plugin versions prior to 1.1.7 store Github API token in cleartext form. As a result, an attacker may perform unauthorized operations on the linked Github account...

CVE-2025-58401

Obsidian GitHub Copilot Plugin versions prior to 1.1.7 store Github API token in cleartext form. As a result, an attacker may perform unauthorized operations on the linked Github account...

CVE-2025-58401

Summary: CVE-2025-58401 affects Obsidian GitHub Copilot Plugin versions prior to 1.1.7 and is due to storing GitHub API tokens in cleartext. This enables an attacker to perform unauthorized operations on the linked GitHub account. Impact: Unauthorized access to the GitHub account via the plugin t...

CVE-2025-58401

Obsidian GitHub Copilot Plugin versions prior to 1.1.7 store Github API token in cleartext form. As a result, an attacker may perform unauthorized operations on the linked Github account...

Obsidian GitHub Copilot Plugin 安全漏洞

Obsidian GitHub Copilot Plugin is a Github Copilot plugin by the individual developer Pierre-Adrien Vasseur. A security vulnerability exists in versions of Obsidian GitHub Copilot Plugin prior to 1.1.7, which stems from storing Github API tokens in clear-text form, which could lead to unauthorize...

Obsidian Plugin Persistence

This module searches for Obsidian vaults for a user, and uploads a malicious community plugin to the vault. The vaults must be opened with community plugins enabled NOT restricted mode, but the plugin will be enabled automatically. Tested against Obsidian 1.7.7 on Kali, Ubuntu 22.04, and Windows...