Weaknesses of type CWE-78

5,018 results

Injeção de comandos do sistema operacional

A aplicação constrói comandos do SO usando entrada do usuário sem sanitizar adequadamente, permitindo que um atacante injete comandos arbitrários. Quando a entrada contém metacaracteres (como `|`, `;`, `&&`, backticks), o shell interpreta-os como operadores, executando código não intencional com os privilégios da aplicação.

Example

Um script PHP que executa `system('ping ' . $_GET['host'])` permite um atacante passar `127.0.0.1; rm -rf /` como parâmetro, executando deleção de arquivos. Ou em Java, `Runtime.exec()` com strings concatenadas do usuário sem validação.

How to mitigate

Use APIs que não invocam shell (ex: `execvp()` em C, arrays de parâmetros em Java/Python, ou prepared commands). Se inevitável usar shell, escape rigorosamente com funções específicas (`escapeshellarg()` em PHP) ou valide contra whitelist de caracteres permitidos. Nunca confie em blacklist de caracteres perigosos.

CVE-2024-33896HIGHCosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are vulnerable to code injection due to improper parametEPSS 4.0%CVE-2022-50596CRITICALD-Link DIR-1260 <= v1.20B05 GetDeviceSettings Unauthenticated Command InjectionEPSS 4.0%CVE-2024-2851MEDIUMTenda AC15 setsambacfg formSetSambaConf os command injectionEPSS 4.0%CVE-2024-2853MEDIUMTenda AC10U setsambacfg formSetSambaConf os command injectionEPSS 4.0%CVE-2026-61498CRITICALVitec Flamingo 4.12.2 Unauthenticated OS Command Injection via gen_graphs.phpEPSS 4.0%CVE-2026-41925CRITICALWDR201A WiFi Extender OS Command Injection via adm.cgi (reboot_time)EPSS 4.0%CVE-2018-3785—A command injection in git-dummy-commit v1.3.0 allows os level commands to be executed due to an unescaped parameter.EPSS 4.0%CVE-2022-32586HIGHAn OS command injection vulnerability exists in the web interface /action/ipcamRecordPost functionality of Abode Systems, Inc. iota All-In-OEPSS 4.0%CVE-2024-2909HIGHRuijie RG-EG350 HTTP POST Request setAction os command injectionEPSS 4.0%CVE-2024-51503HIGHA security agent manual scan command injection vulnerability in the Trend Micro Deep Security 20 Agent could allow an attacker to escalate pEPSS 4.0%CVE-2018-25126CRITICALTVT NVMS-9000 Hard-coded API Credentials & Command InjectionEPSS 4.0%CVE-2018-10900HIGHNetwork Manager VPNC plugin (aka networkmanager-vpnc) before version 1.2.6 is vulnerable to a privilege escalation attack. A new line characEPSS 4.0%CVE-2017-10951—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interactiEPSS 4.0%CVE-2026-3102MEDIUMexiftool PNG File MacOS.pm SetMacOSTags os command injectionEPSS 4.0%CVE-2023-6320CRITICALCommand injection in the com.webos.service.connectionmanager/tv/setVlanStaticAddress endpointEPSS 4.0%CVE-2024-2353HIGHTotolink X6000R shttpd cstecgi.cgi setDiagnosisCfg os command injectionEPSS 4.0%CVE-2025-34044CRITICALWIFISKY 7-Layer Flow Control Router Remote Command ExecutionEPSS 3.9%CVE-2022-21668HIGHPipenv's requirements.txt parsing allows malicious index url in commentsEPSS 3.9%CVE-2026-101967CRITICALJunos OS Evolved: PTX Series: An attacker controlled DHCP response causes root-level compromise when zero-touch provisioning is usedEPSS 3.9%CVE-2026-101978HIGHJunos OS Evolved: PTX Series: An attacker controlled gRPC response causes root-level compromise when zero-touch provisioning is usedEPSS 3.9%