4412 matches found
CVE-2025-53967
Framelink Figma MCP Server before 0.6.3 allows an unauthenticated remote attacker to execute arbitrary operating system commands via a crafted HTTP POST request with shell metacharacters in input that is used by a fetchWithRetry curl command. The vulnerable endpoint fails to properly sanitize...
CVE-2025-53967: Unprotected Alternate Channel
Framelink Figma MCP Server before 0.6.3 allows an unauthenticated remote attacker to execute arbitrary operating system commands via a crafted HTTP POST request with shell metacharacters in input that is used by a fetchWithRetry curl command. The vulnerable endpoint fails to properly sanitize...
CVE-2025-53967
CVE-2025-53967 affects Framelink Figma MCP Server prior to 0.6.3. The vulnerability is a command injection in the MCP server’s input handling, where user-controlled data is interpolated into shell commands (via a curl fallback in fetch-with-retry), enabling an unauthenticated remote attacker to e...
EUVD-2004-0049
Malware in sbrugna...
EUVD-2001-0291
Malware in sbrugna...
EUVD-2007-3554
Malware in sbrugna...
EUVD-2010-5297
Malware in sbrugna...
EUVD-2013-5060
Malware in sbrugna...
EUVD-2005-0916
Malware in sbrugna...
EUVD-2018-12670
Malware in sbrugna...
EUVD-2006-3541
Malware in sbrugna...
EUVD-2019-10585
Malware in sbrugna...
EUVD-2014-7120
Malware in sbrugna...
EUVD-2010-5295
Malware in sbrugna...
EUVD-2002-1419
Malware in sbrugna...
EUVD-2010-5293
Malware in sbrugna...
EUVD-2020-4422
Malware in sbrugna...
EUVD-2017-5937
Malware in sbrugna...