Weaknesses of type CWE-78

5,015 results

Injeção de comandos do sistema operacional

A aplicação constrói comandos do SO usando entrada do usuário sem sanitizar adequadamente, permitindo que um atacante injete comandos arbitrários. Quando a entrada contém metacaracteres (como `|`, `;`, `&&`, backticks), o shell interpreta-os como operadores, executando código não intencional com os privilégios da aplicação.

Example

Um script PHP que executa `system('ping ' . $_GET['host'])` permite um atacante passar `127.0.0.1; rm -rf /` como parâmetro, executando deleção de arquivos. Ou em Java, `Runtime.exec()` com strings concatenadas do usuário sem validação.

How to mitigate

Use APIs que não invocam shell (ex: `execvp()` em C, arrays de parâmetros em Java/Python, ou prepared commands). Se inevitável usar shell, escape rigorosamente com funções específicas (`escapeshellarg()` em PHP) ou valide contra whitelist de caracteres permitidos. Nunca confie em blacklist de caracteres perigosos.

CVE-2022-26258CRITICALD-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.EPSS 91.6%KEVCVE-2026-42271HIGHLiteLLM: Authenticated command execution via MCP stdio test endpointsEPSS 91.4%KEVCVE-2021-21315HIGHCommand Injection VulnerabilityEPSS 90.7%KEVCVE-2019-17621CRITICALThe UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execEPSS 90.6%KEVCVE-2022-31137CRITICALUnauthenticated Remote Code Execution in Roxy-WIEPSS 90.6%CVE-2024-29972CRITICAL** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program "remote_help-cgi" in Zyxel NAS326 firmware versions bEPSS 90.3%CVE-2023-47218MEDIUMQTS, QuTS hero, QuTScloudEPSS 89.9%CVE-2018-14839CRITICALLG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary code (remote). The attack vector is: HTTP POEPSS 89.2%KEVCVE-2023-6895MEDIUMHikvision Intercom Broadcasting System ping.php os command injectionEPSS 89.0%CVE-2023-40504CRITICALLG Simple Editor readVideoInfo Command Injection Remote Code Execution VulnerabilityEPSS 88.7%CVE-2024-8190HIGHAn OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a remote authenticated attEPSS 88.5%KEVCVE-2017-17411—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Linksys WVBR0. Authentication is not reqEPSS 87.9%CVE-2023-46359CRITICALAn OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacEPSS 87.6%CVE-2018-9276HIGHAn issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console withEPSS 87.0%KEVCVE-2019-16057CRITICALThe login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection.EPSS 86.5%KEVCVE-2024-3721MEDIUMTBK DVR-4104/DVR-4216 os command injectionEPSS 86.5%CVE-2024-29973CRITICAL** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the “setCookie” parameter in Zyxel NAS326 firmware versions before V5EPSS 86.2%CVE-2020-2038HIGHPAN-OS: OS command injection vulnerability in the management web interfaceEPSS 86.2%CVE-2016-20016CRITICALMVPower CCTV DVR models, including TV-7104HE 1.8.4 115215B9 and TV7108HE, contain a web shell that is accessible via a /shell URI. A remote EPSS 86.2%CVE-2023-43208CRITICALNextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that this vulnerability iEPSS 85.9%KEV