Weaknesses of type CWE-77

2,807 results

Injeção de comando por entrada não neutralizada

O software monta um comando (shell, sistema operacional ou aplicação) usando dados recebidos de fora (entrada do usuário, API, banco de dados) sem remover ou neutralizar caracteres especiais que alteram a semântica do comando. Isso permite que um atacante injete comandos arbitrários que serão executados com as permissões da aplicação.

Example

Um script PHP que executa ping com o IP fornecido pelo usuário: `system('ping ' . $_GET['ip'])`. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, porque o ponto-e-vírgula não foi escapado e o shell interpreta dois comandos sequenciais.

How to mitigate

Use APIs seguras que não envolvem interpretação de shell (ex: ProcessBuilder em Java, subprocess.run com shell=False em Python). Se imperativo usar shell, valide com whitelist rigorosa (apenas caracteres alfanuméricos/IPs válidos) e escape com funções específicas da linguagem (escapeshellarg em PHP, shlex.quote em Python).

CVE-2025-10634MEDIUMD-Link DIR-823X Environment Variable goahead sub_412E7C command injectionEPSS 7.4%CVE-2023-51835MEDIUMAn issue in TRENDnet TEW-822DRE v.1.03B02 allows a local attacker to execute arbitrary code via the parameters ipv4_ping in the /boafrm/formEPSS 7.3%CVE-2025-5695MEDIUMTeledyne FLIR AX8 Backend subscriptions.php subscribe_to_alarm command injectionEPSS 7.3%CVE-2025-14648MEDIUMDedeBIZ catalog_add.php command injectionEPSS 7.3%CVE-2025-2701MEDIUMAMTT Hotel Broadband Operation System port_setup.php popen os command injectionEPSS 7.3%CVE-2020-15642HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of installations of Marvell QConvergeConsole EPSS 7.2%CVE-2025-5000MEDIUMLinksys FGW3000-AH/FGW3000-HK HTTP POST Request sysconf.cgi control_panel_sw command injectionEPSS 7.2%CVE-2024-8213MEDIUMD-Link DNS-1550-04 hd_config.cgi cgi_FMT_R12R5_1st_DiskMGR command injectionEPSS 7.2%CVE-2024-51027MEDIUMRuijie NBR800G gateway NBR_RGOS_11.1(6)B4P9 is vulnerable to command execution in /itbox_pi/networksafe.php via the province parameter.EPSS 7.1%CVE-2025-13797MEDIUMADSLR B-QE2W401 send_order.cgi parameterdel_swifimac command injectionEPSS 7.1%CVE-2025-13798MEDIUMADSLR NBR1005GPEV2 send_order.cgi ap_macfilter_add command injectionEPSS 7.1%CVE-2025-10326MEDIUMMiczFlor RPi-Jukebox-RFID single.php os command injectionEPSS 7.1%CVE-2026-1324HIGHSangfor Operation and Maintenance Management System SSH Protocol session SessionController os command injectionEPSS 7.1%CVE-2025-12296MEDIUMD-Link DAP-2695 Firmware Update sub_4174B0 os command injectionEPSS 7.0%CVE-2020-14505—Advantech iView, versions 5.6 and prior, has an improper neutralization of special elements used in a command (“command injection”) vulnerabEPSS 7.0%CVE-2025-15501CRITICALSangfor Operation and Maintenance Management System getCmd WriterHandle.getCmd os command injectionEPSS 7.0%CVE-2023-2647MEDIUMWeaver E-Office File Upload utility_all.php command injectionEPSS 7.0%CVE-2018-16462—A command injection vulnerability in the apex-publish-static-files npm module version <2.0.1 which allows arbitrary shell command execution EPSS 7.0%CVE-2026-4253MEDIUMTenda AC8 Web UploadCfg route_set_user_policy_rule os command injectionEPSS 7.0%CVE-2026-1192MEDIUMTosei Online Store Management System ネット店舗管理システム imode_alldata.php command injectionEPSS 6.9%