Weaknesses of type CWE-78

4,645 results

Injeção de comandos do sistema operacional

A aplicação constrói comandos do SO usando entrada do usuário sem sanitizar adequadamente, permitindo que um atacante injete comandos arbitrários. Quando a entrada contém metacaracteres (como `|`, `;`, `&&`, backticks), o shell interpreta-os como operadores, executando código não intencional com os privilégios da aplicação.

Example

Um script PHP que executa `system('ping ' . $_GET['host'])` permite um atacante passar `127.0.0.1; rm -rf /` como parâmetro, executando deleção de arquivos. Ou em Java, `Runtime.exec()` com strings concatenadas do usuário sem validação.

How to mitigate

Use APIs que não invocam shell (ex: `execvp()` em C, arrays de parâmetros em Java/Python, ou prepared commands). Se inevitável usar shell, escape rigorosamente com funções específicas (`escapeshellarg()` em PHP) ou valide contra whitelist de caracteres permitidos. Nunca confie em blacklist de caracteres perigosos.

CVE-2026-71284HIGHFledge IoT Gateway Backup Restore OS Command Injection via Tar Member FilenameEPSS 0.9%CVE-2023-50216HIGHD-Link G416 awsfile tar File Handling Command Injection Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-50206HIGHD-Link G416 flupl query_type edit Command Injection Remote Code Execution VulnerabilityEPSS 0.9%CVE-2024-22033MEDIUMobs-service-download_url is vulnerable to argument injectionEPSS 0.9%CVE-2023-50202HIGHD-Link G416 flupl pythonmodules Command Injection Remote Code Execution VulnerabilityEPSS 0.9%CVE-2021-21530HIGHDell OpenManage Enterprise-Modular (OME-M) versions prior to 1.30.00 contain a security bypass vulnerability. An authenticated malicious useEPSS 0.9%CVE-2024-24892HIGHUnauthorized RCE in migration-toolsEPSS 0.9%CVE-2023-50200HIGHD-Link G416 cfgsave backusb Command Injection Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-50201HIGHD-Link G416 cfgsave upusb Command Injection Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-50205HIGHD-Link G416 awsfile chmod Command Injection Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-50207HIGHD-Link G416 flupl filename Command Injection Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-50217HIGHD-Link G416 awsfile rm Command Injection Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-50213HIGHD-Link G416 nodered File Handling Command Injection Remote Code Execution VulnerabilityEPSS 0.9%CVE-2026-33648HIGHAVideo Vulnerable to OS Command Injection via Unsanitized `users_id` and `liveTransmitionHistory_id` in Restreamer Log File PathEPSS 0.9%CVE-2025-60960HIGHOS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers tEPSS 0.9%CVE-2023-39471HIGHTP-Link TL-WR841N ated_tp Command Injection Remote Code Execution VulnerabilityEPSS 0.9%CVE-2026-48723HIGHBrowserStack Cypress CL: Command Injection via cypress_config_file leads to arbitrary code execution through malicious browserstack.jsonEPSS 0.9%CVE-2025-5743HIGHCWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remEPSS 0.9%CVE-2026-71472CRITICALAcm-search-v2-rhel9: search-v2-operator: shell-command and sql injection in postgresql-start.sh via cr-supplied work_memEPSS 0.9%CVE-2025-6562HIGHHunt Electronic Hybrid DVR - OS Command InjectionEPSS 0.9%