Weaknesses of type CWE-78

4,575 results

Injeção de comandos do sistema operacional

A aplicação constrói comandos do SO usando entrada do usuário sem sanitizar adequadamente, permitindo que um atacante injete comandos arbitrários. Quando a entrada contém metacaracteres (como `|`, `;`, `&&`, backticks), o shell interpreta-os como operadores, executando código não intencional com os privilégios da aplicação.

Example

Um script PHP que executa `system('ping ' . $_GET['host'])` permite um atacante passar `127.0.0.1; rm -rf /` como parâmetro, executando deleção de arquivos. Ou em Java, `Runtime.exec()` com strings concatenadas do usuário sem validação.

How to mitigate

Use APIs que não invocam shell (ex: `execvp()` em C, arrays de parâmetros em Java/Python, ou prepared commands). Se inevitável usar shell, escape rigorosamente com funções específicas (`escapeshellarg()` em PHP) ou valide contra whitelist de caracteres permitidos. Nunca confie em blacklist de caracteres perigosos.

CVE-2013-10037CRITICALWebTester 5.x install2.php Unauthenticated Command ExecutionEPSS 13.6%CVE-2026-36356CRITICALThe GoAhead web server on MeiG Smart FORGE_SLT711 devices (firmware MDM9607.LE.1.0-00110-STD.PROD-1) allows unauthenticated OS command injecEPSS 13.5%CVE-2026-15733CRITICALWGDashboard Remote Code Execution vulnerabilityEPSS 13.5%CVE-2023-50094HIGHreNgine before 2.1.2 allows OS Command Injection if an adversary has a valid session ID. The attack places shell metacharacters in an api/toEPSS 13.5%CVE-2023-50358MEDIUMQTS, QuTS hero, QuTScloudEPSS 13.5%CVE-2026-5853CRITICALTotolink A7100RU CGI cstecgi.cgi setIpv6LanCfg os command injectionEPSS 13.5%CVE-2026-5852CRITICALTotolink A7100RU CGI cstecgi.cgi setIptvCfg os command injectionEPSS 13.5%CVE-2025-5946HIGHRCE via the poller reload feature available only to user with high privilegeEPSS 13.5%CVE-2026-6195CRITICALTotolink A7100RU CGI cstecgi.cgi setPasswordCfg os command injectionEPSS 13.5%CVE-2025-52379MEDIUMNexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below contains an authenticated command injection vulnerability in the firmware uEPSS 13.5%CVE-2026-6483HIGHWavlink WL-WN530H4 internet.cgi snprintf os command injectionEPSS 13.4%CVE-2026-5851CRITICALTotolink A7100RU CGI cstecgi.cgi setUPnPCfg os command injectionEPSS 13.4%CVE-2026-33478CRITICALAVideo Multi-Chain Attack: Unauthenticated Remote Code Execution via Clone Key Disclosure, Database Dump, and Command InjectionEPSS 13.3%CVE-2025-1610MEDIUMLB-LINK AC1900 Router set_blacklist websGetVar os command injectionEPSS 13.2%CVE-2023-20036CRITICALCisco Industrial Network Director Command Injection VulnerabilityEPSS 13.1%CVE-2020-15778HIGHscp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destinatEPSS 13.0%CVE-2025-68154HIGHCommand Injection in fsSize() on WindowsEPSS 13.0%CVE-2026-45087CRITICALDalfox: Unauthenticated Remote Code Execution via `found-action` in Dalfox Server ModeEPSS 13.0%CVE-2025-2094MEDIUMTOTOLINK EX1800T cstecgi.cgi setWiFiExtenderConfig os command injectionEPSS 13.0%CVE-2025-52906CRITICALTOTOLINK X6000R Command Injection VulnerabilityEPSS 12.8%