Weaknesses of type CWE-78

4,576 results

Injeção de comandos do sistema operacional

A aplicação constrói comandos do SO usando entrada do usuário sem sanitizar adequadamente, permitindo que um atacante injete comandos arbitrários. Quando a entrada contém metacaracteres (como `|`, `;`, `&&`, backticks), o shell interpreta-os como operadores, executando código não intencional com os privilégios da aplicação.

Example

Um script PHP que executa `system('ping ' . $_GET['host'])` permite um atacante passar `127.0.0.1; rm -rf /` como parâmetro, executando deleção de arquivos. Ou em Java, `Runtime.exec()` com strings concatenadas do usuário sem validação.

How to mitigate

Use APIs que não invocam shell (ex: `execvp()` em C, arrays de parâmetros em Java/Python, ou prepared commands). Se inevitável usar shell, escape rigorosamente com funções específicas (`escapeshellarg()` em PHP) ou valide contra whitelist de caracteres permitidos. Nunca confie em blacklist de caracteres perigosos.

CVE-2020-10886HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1EPSS 5.6%CVE-2026-2042HIGHNagios Host monitoringwizard Command Injection Remote Code Execution VulnerabilityEPSS 5.6%CVE-2023-35194HIGHAn OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A sEPSS 5.6%CVE-2023-35193HIGHAn OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A sEPSS 5.6%CVE-2025-34073CRITICALstamparm/maltrail <=0.54 Remote Command ExecutionEPSS 5.6%CVE-2026-8272MEDIUMD-Link DNS-320 webfile_mgr.cgi chown os command injectionEPSS 5.6%CVE-2025-25038CRITICALMiniDVBLinux Root Command InjectionEPSS 5.5%CVE-2026-13545HIGHD-Link DCS-935L POST Parameter setconf.cgi sub_400E40 os command injectionEPSS 5.5%CVE-2023-34356HIGHAn OS command injection vulnerability exists in the data.cgi xfer_dns functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A specially cEPSS 5.5%CVE-2025-5439MEDIUMLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 verifyFacebookLike os command injectionEPSS 5.5%CVE-2025-5440MEDIUMLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 NTP os command injectionEPSS 5.5%CVE-2026-2081MEDIUMD-Link DIR-823X set_password os command injectionEPSS 5.5%CVE-2017-15103—A security-check flaw was found in the way the Heketi 5 server API handled user requests. An authenticated Heketi user could send specially EPSS 5.5%CVE-2026-9787HIGHQuest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution VulnerabilityEPSS 5.5%CVE-2024-57357HIGHAn issue in TPLINK TL-WPA 8630 TL-WPA8630(US)_V2_2.0.4 Build 20230427 allows a remote attacker to execute arbitrary code via function sub_42EPSS 5.5%CVE-2022-30603CRITICALAn OS command injection vulnerability exists in the web interface /action/iperf functionality of Abode Systems, Inc. iota All-In-One SecuritEPSS 5.5%CVE-2020-5760—Grandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to an OS command injection vulnerability. Unauthenticated remote EPSS 5.5%CVE-2022-27005HIGHTotolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were discovered to contain a command injection vulnerabilEPSS 5.5%CVE-2021-20991CRITICALFibaro Home Center Authenticated remote command executionEPSS 5.4%CVE-2022-45005CRITICALIP-COM EW9 V15.11.0.14(9732) was discovered to contain a command injection vulnerability in the cmd_get_ping_output function.EPSS 5.4%