25578 matches found
CVE-2025-53967
Framelink Figma MCP Server before 0.6.3 allows an unauthenticated remote attacker to execute arbitrary operating system commands via a crafted HTTP POST request with shell metacharacters in input that is used by a fetchWithRetry curl command. The vulnerable endpoint fails to properly sanitize...
CVE-2025-60314
Configuroweb Sistema Web de Inventario 1.0 is vulnerable to a Stored Cross-Site Scripting XSS due to the lack of input sanitization on the product name parameter Nombre:Producto allowing an authenticated attacker to inject malicious payloads and execute arbitrary JavaScript...
CVE-2025-53967
CVE-2025-53967 affects Framelink Figma MCP Server prior to 0.6.3. The vulnerability is a command injection in the MCP server’s input handling, where user-controlled data is interpolated into shell commands (via a curl fallback in fetch-with-retry), enabling an unauthenticated remote attacker to e...
EUVD-2019-5890
Malware in sbrugna...
EUVD-2015-3677
Malware in sbrugna...
EUVD-2021-17779
Malware in sbrugna...
EUVD-2021-23918
Malware in sbrugna...
EUVD-2021-20345
Malware in sbrugna...
EUVD-2020-21948
Malware in sbrugna...
EUVD-2020-28794
Malware in sbrugna...
EUVD-2020-7248
Malware in sbrugna...
EUVD-2021-11191
Malware in sbrugna...
EUVD-2021-0626
Malware in sbrugna...
EUVD-2019-18242
Malware in sbrugna...
EUVD-2021-24900
Malware in sbrugna...
EUVD-2013-7274
Malware in sbrugna...
EUVD-2017-15673
Malware in sbrugna...
EUVD-2018-3594
Malware in sbrugna...