192 matches found
CVE-2025-54336
In Plesk Obsidian 18.0.70, isAdminPasswordValid uses an == comparison. Thus, if the correct password is "0e" followed by any digit string, then an attacker can login with any other string that evaluates to 0.0 such as the 0e0 string. This occurs in admin/plib/LoginManager.php...
CVE-2025-54336
In Plesk Obsidian 18.0.70, isAdminPasswordValid uses an == comparison. Thus, if the correct password is "0e" followed by any digit string, then an attacker can login with any other string that evaluates to 0.0 such as the 0e0 string. This occurs in admin/plib/LoginManager.php...
CVE-2025-54336
CVE-2025-54336 (Plesk Obsidian 18.0.70) is a vulnerability where _isAdminPasswordValid uses a weak == comparison in admin/plib/LoginManager.php, enabling authentication bypass if the correct password has the form "0e" followed by digits. This can let an attacker log in with strings evaluating to ...
CVE-2025-54336
In Plesk Obsidian 18.0.70, isAdminPasswordValid uses an == comparison. Thus, if the correct password is "0e" followed by any digit string, then an attacker can login with any other string that evaluates to 0.0 such as the 0e0 string. This occurs in admin/plib/LoginManager.php...
PT-2025-33731
Name of the Vulnerable Software and Affected Versions: Plesk Obsidian version 18.0.70 Description: The isAdminPasswordValid function in Plesk Obsidian uses a weak comparison == which allows an attacker to bypass the administrator password if the correct password is in the format "0e" followed by...
CVE-2025-54336
In Plesk Obsidian 18.0.70, isAdminPasswordValid uses an == comparison. Thus, if the correct password is "0e" followed by any digit string, then an attacker can login with any other string that evaluates to 0.0 such as the 0e0 string. This occurs in admin/plib/LoginManager.php...
Plesk Obsidian 安全漏洞
Plesk Obsidian is a hosting control panel from the Swiss company Plesk. A security vulnerability exists in Plesk Obsidian version 18.0.70, which stems from the use of the == comparison by isAdminPasswordValid and could lead to bypassing authentication...
Malicious code in obsidian-iumeo-ks71t-night-project (npm)
The package obsidian-iumeo-ks71t-night-project was found to contain malicious code...
Malicious code in obsidian-jplel-d5lei-nymph-project (npm)
The package obsidian-jplel-d5lei-nymph-project was found to contain malicious code...
MAL-2025-28066 Malicious code in obsidian-iumeo-ks71t-night-project (npm)
The package obsidian-iumeo-ks71t-night-project was found to contain malicious code...
Malicious code in xylophone-aa5b0-k5qpo-obsidian-project (npm)
The package xylophone-aa5b0-k5qpo-obsidian-project was found to contain malicious code...
Malicious code in obsidian-b763a-7h0h1-solace-project (npm)
The package obsidian-b763a-7h0h1-solace-project was found to contain malicious code...
Malicious code in obsidian-rm5zg-wjktt-ocean-project (npm)
The package obsidian-rm5zg-wjktt-ocean-project was found to contain malicious code...
Malicious code in haven-x5nz7-1h12l-obsidian-project (npm)
The package haven-x5nz7-1h12l-obsidian-project was found to contain malicious code...
Malicious code in orbit-t4hmg-n2rl2-obsidian-project (npm)
The package orbit-t4hmg-n2rl2-obsidian-project was found to contain malicious code...
Malicious code in obsidian-vi126-k7sjp-hearth-project (npm)
The package obsidian-vi126-k7sjp-hearth-project was found to contain malicious code...
Malicious code in obsidian-9dzi7-6um2j-xenith-project (npm)
The package obsidian-9dzi7-6um2j-xenith-project was found to contain malicious code...
Malicious code in dusk-lvvgg-m58r7-obsidian-project (npm)
The package dusk-lvvgg-m58r7-obsidian-project was found to contain malicious code...