Lucene search
K

6 matches found

Snyk
Snyk
added 2026/01/23 5:9 a.m.5 views

Command Injection

Overview mcp-server-siri-shortcuts is a MCP server that provides access to Siri shortcuts Affected versions of this package are vulnerable to Command Injection via the shortcutName parameter. An attacker can execute arbitrary code with elevated privileges by supplying crafted input that is used i...

8.5CVSS6.2AI score0.00043EPSS
Exploits0References2
CVE
CVE
added 2026/01/23 3:28 a.m.10 views

CVE-2026-0758

Summary of CVE-2026-0758 (mcp-server-siri-shortcuts) : A local privilege-escalation command-injection flaw in the shortcutName parameter of mcp-server-siri-shortcuts. The issue arises from insufficient validation of a user-supplied string before it is used in a system call, allowing a low-privile...

7.8CVSS6.2AI score0.00043EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/23 3:28 a.m.25 views

CVE-2026-0758 mcp-server-siri-shortcuts shortcutName Command Injection Privilege Escalation Vulnerability

mcp-server-siri-shortcuts shortcutName Command Injection Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of mcp-server-siri-shortcuts. An attacker must first obtain the ability to execute low-privileged code on the...

7.8CVSS0.00043EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/23 3:28 a.m.2 views

CVE-2026-0758

mcp-server-siri-shortcuts shortcutName Command Injection Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of mcp-server-siri-shortcuts. An attacker must first obtain the ability to execute low-privileged code on the...

7.8CVSS6AI score0.00043EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/01/09 12:0 a.m.3 views

PT-2026-1988

Name of the Vulnerable Software and Affected Versions mcp-server-siri-shortcuts affected versions not specified Description This issue allows local attackers to escalate privileges on affected systems. An attacker must first have the ability to execute low-privileged code on the target system. Th...

7.8CVSS7.9AI score0.00043EPSS
Exploits0References4
Zero Day Initiative
Zero Day Initiative
added 2026/01/09 12:0 a.m.1 views

(0Day) mcp-server-siri-shortcuts shortcutName Command Injection Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of mcp-server-siri-shortcuts. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7.8CVSS7.4AI score0.00043EPSS
Exploits0
Rows per page
Query Builder