Weaknesses of type CWE-78

4,576 results

Injeção de comandos do sistema operacional

A aplicação constrói comandos do SO usando entrada do usuário sem sanitizar adequadamente, permitindo que um atacante injete comandos arbitrários. Quando a entrada contém metacaracteres (como `|`, `;`, `&&`, backticks), o shell interpreta-os como operadores, executando código não intencional com os privilégios da aplicação.

Example

Um script PHP que executa `system('ping ' . $_GET['host'])` permite um atacante passar `127.0.0.1; rm -rf /` como parâmetro, executando deleção de arquivos. Ou em Java, `Runtime.exec()` com strings concatenadas do usuário sem validação.

How to mitigate

Use APIs que não invocam shell (ex: `execvp()` em C, arrays de parâmetros em Java/Python, ou prepared commands). Se inevitável usar shell, escape rigorosamente com funções específicas (`escapeshellarg()` em PHP) ou valide contra whitelist de caracteres permitidos. Nunca confie em blacklist de caracteres perigosos.

CVE-2023-28381HIGHAn OS command injection vulnerability exists in the admin.cgi MVPN_trial_init functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A speEPSS 5.9%CVE-2026-8227MEDIUMWavlink NU516U1 adm.cgi wzdapMesh os command injectionEPSS 5.9%CVE-2026-8230MEDIUMWavlink NU516U1 login.cgi sys_login1 os command injectionEPSS 5.9%CVE-2026-8229MEDIUMWavlink NU516U1 wireless.cgi WifiBasic os command injectionEPSS 5.9%CVE-2026-2142HIGHD-Link DIR-823X set_qos sub_420688 os command injectionEPSS 5.9%CVE-2019-5477—A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open` meEPSS 5.9%CVE-2026-48030CRITICALPheditor: OS Command Injection in terminal handler via unsanitized 'dir' parameter (CWE-78)EPSS 5.8%CVE-2023-37477HIGHCommand injection in firewall ip functionality in 1PanelEPSS 5.8%CVE-2022-40969HIGHAn os command injection vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specialEPSS 5.8%CVE-2025-15499HIGHSangfor Operation and Maintenance Management System VersionController.java uploadCN os command injectionEPSS 5.8%CVE-2023-22653HIGHAn OS command injection vulnerability exists in the vtysh_ubus tcpdump_start_cb functionality of Milesight UR32L v32.3.0.5. A specially crafEPSS 5.8%CVE-2026-1448HIGHD-Link DIR-615 Web Management wiz_policy_3_machine.php os command injectionEPSS 5.8%CVE-2023-27380HIGHAn OS command injection vulnerability exists in the admin.cgi USSD_send functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A speciallyEPSS 5.7%CVE-2026-8228MEDIUMWavlink NU516U1 wireless.cgi advance os command injectionEPSS 5.7%CVE-2024-7357MEDIUMD-Link DIR-600 soap.cgi soapcgi_main os command injectionEPSS 5.7%CVE-2025-71284CRITICALSynway SMG Gateway Management Software OS Command Injection via radius_addressEPSS 5.7%CVE-2019-11062—SUNNET WMPro v5.0 and v5.1 has OS Command InjectionEPSS 5.7%CVE-2026-19586CRITICALPre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada GatewaysEPSS 5.7%CVE-2025-2611CRITICALICTBroadcast <= 7.4 Unauthenticated Session Cookie RCEEPSS 5.7%CVE-2026-28517CRITICALopenDCIM <= 23.04 OS Command Injection via dot Configuration ParameterEPSS 5.6%