Weaknesses of type CWE-77

2,810 results

Injeção de comando por entrada não neutralizada

O software monta um comando (shell, sistema operacional ou aplicação) usando dados recebidos de fora (entrada do usuário, API, banco de dados) sem remover ou neutralizar caracteres especiais que alteram a semântica do comando. Isso permite que um atacante injete comandos arbitrários que serão executados com as permissões da aplicação.

Example

Um script PHP que executa ping com o IP fornecido pelo usuário: `system('ping ' . $_GET['ip'])`. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, porque o ponto-e-vírgula não foi escapado e o shell interpreta dois comandos sequenciais.

How to mitigate

Use APIs seguras que não envolvem interpretação de shell (ex: ProcessBuilder em Java, subprocess.run com shell=False em Python). Se imperativo usar shell, valide com whitelist rigorosa (apenas caracteres alfanuméricos/IPs válidos) e escape com funções específicas da linguagem (escapeshellarg em PHP, shlex.quote em Python).

CVE-2023-46993CRITICALIn TOTOLINK A3300R V17.0.0cu.557_B20221024 when dealing with setLedCfg request, there is no verification for the enable parameter, which canEPSS 1.5%CVE-2023-46976CRITICALTOTOLINK A3300R 17.0.0cu.557_B20221024 contains a command injection via the file_name parameter in the UploadFirmwareFile function.EPSS 1.5%CVE-2022-35518MEDIUMWAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 nas.cgi has no filtering on parameters: User1Passwd and User1, which leads to command iEPSS 1.5%CVE-2023-46979CRITICALTOTOLINK X6000R V9.4.0cu.852_B20230719 was discovered to contain a command injection vulnerability via the enable parameter in the setLedCfgEPSS 1.5%CVE-2024-57583CRITICALTenda AC18 V15.03.05.19 was discovered to contain a command injection vulnerability via the usbName parameter in the formSetSambaConf functiEPSS 1.5%CVE-2024-22546MEDIUMTRENDnet TEW-815DAP 1.0.2.0 is vulnerable to Command Injection via the do_setNTP function. An authenticated attacker with administrator privEPSS 1.5%CVE-2025-59735CRITICALMultiple vulnerabilities in AndSoft's e-TMSEPSS 1.5%CVE-2021-41146HIGHArbitrary command execution on Windows in qutebrowserEPSS 1.5%CVE-2023-39809CRITICALN.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain an OS command injection vulnerability via shell metacharacters in the systemEPSS 1.5%CVE-2026-16488LOWQUSETIONS MiniCode-Python Project File config.py subprocess.Popen os command injectionEPSS 1.5%CVE-2024-42505CRITICALUnauthenticated Command Injection Vulnerabilities in the CLI Service Accessed by the PAPI ProtocolEPSS 1.5%CVE-2025-4678HIGHRemote Code Execution leads to Command InjectionEPSS 1.5%CVE-2026-31255MEDIUMA command injection vulnerability exists in Tenda AC18 V15.03.05.05_multi. The vulnerability is located in the /goform/SetSambaCfg interfaceEPSS 1.5%CVE-2024-30572HIGHNetgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the ntp_server parameter.EPSS 1.5%CVE-2018-19015—An attacker could inject commands to launch programs and create, write, and read files on CX-Supervisor (Versions 3.42 and prior) through a EPSS 1.5%CVE-2023-40301CRITICALNETSCOUT nGeniusPULSE 3.8 has a Command Injection Vulnerability.EPSS 1.5%CVE-2024-4267HIGHRemote Code Execution in parisneo/lollms-webuiEPSS 1.5%CVE-2025-2733MEDIUMmannaandpoem OpenManus Prompt python_execute.py os command injectionEPSS 1.5%CVE-2025-4849MEDIUMTOTOLINK N300RH cstecgi.cgi CloudACMunualUpdateUserdata command injectionEPSS 1.5%CVE-2023-22766HIGHAuthenticated Remote Command Execution in the ArubaOS Command Line InterfaceEPSS 1.5%