obsidian-note-toolbar-PoC

Ejecución de Código Arbitrario Dirigida por Frontmatter en Note Toolbar mediante la Cadena de Variables propNAME → js: Estado del CVE: solicitado, pendiente de asignación. Este hallazgo se publica como GHSA-q8cw-3m8c-5pf2. Tras la asignación del CVE, este repositorio se renombra a...

supernote-obsidian-plugin-PoC

Resumen Estado del CVE: solicitado, pendiente de asignación. Este hallazgo se publica como GHSA-3gx3-r874-5pp4. Al asignarse el CVE, este repositorio se renombra CVE-YYYY-NNNNN-supernote-obsidian-plugin-PoC y este banner se reemplaza con el enlace del CVE...

CVE-2025-58401

Obsidian GitHub Copilot Plugin versions prior to 1.1.7 store Github API token in cleartext form. As a result, an attacker may perform unauthorized operations on the linked Github account...

CVE-2025-58401

Obsidian GitHub Copilot Plugin versions prior to 1.1.7 store Github API token in cleartext form. As a result, an attacker may perform unauthorized operations on the linked Github account...

CVE-2025-58401

Summary: CVE-2025-58401 affects Obsidian GitHub Copilot Plugin versions prior to 1.1.7 and is due to storing GitHub API tokens in cleartext. This enables an attacker to perform unauthorized operations on the linked GitHub account. Impact: Unauthorized access to the GitHub account via the plugin t...

CVE-2025-58401

Obsidian GitHub Copilot Plugin versions prior to 1.1.7 store Github API token in cleartext form. As a result, an attacker may perform unauthorized operations on the linked Github account...

Obsidian GitHub Copilot Plugin 安全漏洞

Obsidian GitHub Copilot Plugin is a Github Copilot plugin by the individual developer Pierre-Adrien Vasseur. A security vulnerability exists in versions of Obsidian GitHub Copilot Plugin prior to 1.1.7, which stems from storing Github API tokens in clear-text form, which could lead to unauthorize...

Obsidian Plugin Persistence

This module searches for Obsidian vaults for a user, and uploads a malicious community plugin to the vault. The vaults must be opened with community plugins enabled NOT restricted mode, but the plugin will be enabled automatically. Tested against Obsidian 1.7.7 on Kali, Ubuntu 22.04, and Windows...