Weaknesses of type CWE-78

4,975 results

Injeção de comandos do sistema operacional

A aplicação constrói comandos do SO usando entrada do usuário sem sanitizar adequadamente, permitindo que um atacante injete comandos arbitrários. Quando a entrada contém metacaracteres (como `|`, `;`, `&&`, backticks), o shell interpreta-os como operadores, executando código não intencional com os privilégios da aplicação.

Example

Um script PHP que executa `system('ping ' . $_GET['host'])` permite um atacante passar `127.0.0.1; rm -rf /` como parâmetro, executando deleção de arquivos. Ou em Java, `Runtime.exec()` com strings concatenadas do usuário sem validação.

How to mitigate

Use APIs que não invocam shell (ex: `execvp()` em C, arrays de parâmetros em Java/Python, ou prepared commands). Se inevitável usar shell, escape rigorosamente com funções específicas (`escapeshellarg()` em PHP) ou valide contra whitelist de caracteres permitidos. Nunca confie em blacklist de caracteres perigosos.

CVE-2025-34033HIGH5VTechnologies Blue Angel Software Suite OS Command InjectionEPSS 13.2%CVE-2025-1610MEDIUMLB-LINK AC1900 Router set_blacklist websGetVar os command injectionEPSS 13.2%CVE-2022-1703—Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a remote authenticated attackEPSS 13.0%CVE-2025-68154HIGHCommand Injection in fsSize() on WindowsEPSS 13.0%CVE-2025-2094MEDIUMTOTOLINK EX1800T cstecgi.cgi setWiFiExtenderConfig os command injectionEPSS 13.0%CVE-2025-28219CRITICALNetgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usb_adv.cgi, which allows remote attackers to execute arbitrary coEPSS 12.8%CVE-2025-9745MEDIUMD-Link DI-500WF jhttpd version_upgrade.asp os command injectionEPSS 12.7%CVE-2020-6627CRITICALThe web-management application on Seagate Central NAS STCG2000300, STCG3000300, and STCG4000300 devices allows OS command injection via mv_bEPSS 12.7%CVE-2025-7414MEDIUMTenda O3V2 httpd setPingInfo fromNetToolGet os command injectionEPSS 12.6%CVE-2025-59366CRITICALAn authentication-bypass vulnerability exists in AiCloud. This vulnerability can be triggered by an unintended side effect of the Samba funcEPSS 12.5%CVE-2024-44333HIGHD-Link DI-7003GV2 v24.04.18D1, DI-7100G+V2 v24.04.18D1, DI-7100GV2 v24.04.18D1, DI-7200GV2 v24.04.18E1, DI-7300G+V2 v24.04.18D1, and DI-7400EPSS 12.4%CVE-2025-1829MEDIUMTOTOLINK X18 cstecgi.cgi setMtknatCfg os command injectionEPSS 12.4%CVE-2023-3608MEDIUMRuijie BCR810W Tracert Page os command injectionEPSS 12.3%CVE-2025-2172MEDIUMAviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 fail to sanitize user input prior to passing the input to command line uEPSS 12.2%CVE-2025-53679MEDIUMAn improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vulnerability in FortinEPSS 12.2%CVE-2025-7407MEDIUMNetgear D6400 diag.cgi os command injectionEPSS 12.1%CVE-2017-20216CRITICALFLIR Thermal Camera PT-Series firmware version 8.0.0.64 Unauthenticated Remote Command InjectionEPSS 12.0%CVE-2024-11003HIGHQualys discovered that needrestart, before version 3.8, passes unsanitized data to a library (Modules::ScanDeps) which expects safe input. TEPSS 12.0%CVE-2026-40933CRITICALFlowise: Authenticated RCE Via MCP AdaptersEPSS 12.0%CVE-2021-33990CRITICALLiferay Portal 6.2.5 allows Command=FileUpload&Type=File&CurrentFolder=/ requests when frmfolders.html exists. NOTE: The vendor disputes thiEPSS 11.9%