EUVD-2023-46403

Malicious code in bioql PyPI...

EUVD-2025-31578

Malicious code in bioql PyPI...

EUVD-2025-28247

Malicious code in bioql PyPI...

EUVD-2025-22366

Malicious code in bioql PyPI...

EUVD-2022-4162

Malicious code in bioql PyPI...

EUVD-2022-36364

Malicious code in bioql PyPI...

EUVD-2023-53842

Malicious code in bioql PyPI...

EUVD-2024-2172

Malicious code in bioql PyPI...

EUVD-2023-33016

Malicious code in bioql PyPI...

EUVD-2022-2178

Malicious code in bioql PyPI...

EUVD-2022-51839

Malicious code in bioql PyPI...

EUVD-2025-19706

Malicious code in bioql PyPI...

EUVD-2021-8675

Malicious code in bioql PyPI...

CVE-2025-56449

A security vulnerability was identified in Obsidian Scheduler's REST API 5.0.0 thru 6.3.0. If an account is locked out due to not enrolling in MFA e.g. after the 7-day enforcement window, the REST API still allows the use of Basic Authentication to authenticate and perform administrative actions...

CVE-2025-56449

A security vulnerability was identified in Obsidian Scheduler's REST API 5.0.0 thru 6.3.0. If an account is locked out due to not enrolling in MFA e.g. after the 7-day enforcement window, the REST API still allows the use of Basic Authentication to authenticate and perform administrative actions...

CVE-2025-56449

A security vulnerability was identified in Obsidian Scheduler's REST API 5.0.0 thru 6.3.0. If an account is locked out due to not enrolling in MFA e.g. after the 7-day enforcement window, the REST API still allows the use of Basic Authentication to authenticate and perform administrative actions...

PT-2025-39827

Name of the Vulnerable Software and Affected Versions Obsidian Scheduler versions 5.0.0 through 6.3.0 Description A security issue exists in the Obsidian Scheduler REST API. If an account is locked out due to not enrolling in Multi-Factor Authentication MFA, the REST API continues to permit the u...

Obsidian Scheduler 安全漏洞

Obsidian Scheduler is an enterprise-level task scheduler from Obsidian USA. A security vulnerability exists in Obsidian Scheduler versions 5.0.0 through 6.3.0, which stems from an account lockout that still allows authentication via Basic Authentication, which could lead to bypassing MFA...

CVE-2025-56449

A security vulnerability was identified in Obsidian Scheduler's REST API 5.0.0 thru 6.3.0. If an account is locked out due to not enrolling in MFA e.g. after the 7-day enforcement window, the REST API still allows the use of Basic Authentication to authenticate and perform administrative actions...

CVE-2025-56449

Obsidian Scheduler REST API 5.0.0–6.3.0 is affected. The root cause is that accounts locked out due to MFA enforcement can still authenticate via Basic Authentication for administrative actions, allowing creation of a new privileged user and bypassing MFA protections. The issue affects the REST A...