Weaknesses of type CWE-77

2,810 results

Injeção de comando por entrada não neutralizada

O software monta um comando (shell, sistema operacional ou aplicação) usando dados recebidos de fora (entrada do usuário, API, banco de dados) sem remover ou neutralizar caracteres especiais que alteram a semântica do comando. Isso permite que um atacante injete comandos arbitrários que serão executados com as permissões da aplicação.

Example

Um script PHP que executa ping com o IP fornecido pelo usuário: `system('ping ' . $_GET['ip'])`. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, porque o ponto-e-vírgula não foi escapado e o shell interpreta dois comandos sequenciais.

How to mitigate

Use APIs seguras que não envolvem interpretação de shell (ex: ProcessBuilder em Java, subprocess.run com shell=False em Python). Se imperativo usar shell, valide com whitelist rigorosa (apenas caracteres alfanuméricos/IPs válidos) e escape com funções específicas da linguagem (escapeshellarg em PHP, shlex.quote em Python).

CVE-2025-9174MEDIUMneurobin shc Filename shc.c make os command injectionEPSS 1.3%CVE-2023-33530HIGHThere is a command injection vulnerability in the Tenda G103 Gigabit GPON Terminal with firmware version V1.0.0.5. If an attacker gains web EPSS 1.3%CVE-2025-12155HIGHCommand Injection in LookerEPSS 1.3%CVE-2021-41143HIGHOpenMage LTS arbitrary file deletion in customer media allows for remote code executionEPSS 1.3%CVE-2023-22913HIGHA post-authentication command injection vulnerability in the “account_operator.cgi” CGI program of Zyxel USG FLEX series firmware versions 4EPSS 1.3%CVE-2025-9176MEDIUMneurobin shc Environment Variable shc.c make os command injectionEPSS 1.3%CVE-2025-51457HIGHD-Link DAP-2610 up to 2.06B08r099 contains an authenticated command injection vulnerability within the web interface at the /index.xgi endpoEPSS 1.3%CVE-2024-33508MEDIUMAn improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in Fortinet FortiClientEMS 7.2EPSS 1.3%CVE-2024-48017MEDIUMDell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an Improper Neutralization of Special ElementsEPSS 1.3%CVE-2024-45824CRITICALFactoryTalk® View Site Edition Remote Code Execution Vulnerability via Lack of Input ValidationEPSS 1.3%CVE-2023-24330HIGHCommand Injection vulnerability in D-Link Dir 882 with firmware version DIR882A1_FW130B06 allows attackers to run arbitrary commands via craEPSS 1.3%CVE-2023-6999HIGHPods - Custom Content Types and Fields - Authenticated (Contributor+) Remote Code ExecutionEPSS 1.3%CVE-2023-7227CRITICALCommand Injection vulnerability in SystemK NVR 504/508/516EPSS 1.3%CVE-2023-24612CRITICALThe PdfBook extension through 2.0.5 before b07b6a64 for MediaWiki allows command injection via an option.EPSS 1.3%CVE-2024-24216CRITICALZentao v18.0 to v18.10 was discovered to contain a remote code execution (RCE) vulnerability via the checkConnection method of /app/zentao/mEPSS 1.3%CVE-2022-41870HIGHAP Manager in Innovaphone before 13r2 Service Release 17 allows command injection via a modified service ID during app upload.EPSS 1.3%CVE-2025-29228CRITICALLinksys E5600 V1.1.0.26 is vulnerable to command injection in the runtime.macClone function via the mc.ip parameter.EPSS 1.3%CVE-2025-29229CRITICALlinksys E5600 V1.1.0.26 is vulnerable to command injection in the function ddnsStatus.EPSS 1.3%CVE-2025-26063CRITICALAn issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers to execute arbitrary code via injecting a crafted paEPSS 1.3%CVE-2021-32660MEDIUMTechDocs content sanitization bypassEPSS 1.3%