Weaknesses of type CWE-78

5,018 results

Injeção de comandos do sistema operacional

A aplicação constrói comandos do SO usando entrada do usuário sem sanitizar adequadamente, permitindo que um atacante injete comandos arbitrários. Quando a entrada contém metacaracteres (como `|`, `;`, `&&`, backticks), o shell interpreta-os como operadores, executando código não intencional com os privilégios da aplicação.

Example

Um script PHP que executa `system('ping ' . $_GET['host'])` permite um atacante passar `127.0.0.1; rm -rf /` como parâmetro, executando deleção de arquivos. Ou em Java, `Runtime.exec()` com strings concatenadas do usuário sem validação.

How to mitigate

Use APIs que não invocam shell (ex: `execvp()` em C, arrays de parâmetros em Java/Python, ou prepared commands). Se inevitável usar shell, escape rigorosamente com funções específicas (`escapeshellarg()` em PHP) ou valide contra whitelist de caracteres permitidos. Nunca confie em blacklist de caracteres perigosos.

CVE-2022-50791HIGHSOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via ping.phpEPSS 3.8%CVE-2022-31249HIGH[RANCHER] OS command injection in Rancher and FleetEPSS 3.8%CVE-2026-9151HIGHCommand Injection Vulnerability in OpenVPN on Multiple TP-Link Archer RoutersEPSS 3.8%CVE-2011-10026CRITICALSpreecommerce < 0.50.x API RCEEPSS 3.8%CVE-2024-2910MEDIUMRuijie RG-EG350 HTTP POST Request vpnAction os command injectionEPSS 3.7%CVE-2023-48842CRITICALD-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at hedwig.cgi.EPSS 3.7%CVE-2023-4410MEDIUMTOTOLINK EX1200L setDiagnosisCfg os command injectionEPSS 3.7%CVE-2023-4412MEDIUMTOTOLINK EX1200L setWanCfg os command injectionEPSS 3.7%CVE-2026-26068CRITICALemp3r0r Agent-Controlled Metadata to Operator RCE (tmux Command Injection)EPSS 3.7%CVE-2022-24796CRITICALRemote Command Injection in RaspberryMaticEPSS 3.7%CVE-2026-86299CRITICALLinksys RE7000 PingTest json.cgi platform_event_pingTest os command injectionEPSS 3.7%CVE-2026-4499MEDIUMD-Link DIR-820LW SSDP ssdpcgi_main os command injectionEPSS 3.7%CVE-2025-15254MEDIUMTenda W6-S ATE Service ate TendaAte os command injectionEPSS 3.7%CVE-2023-24595HIGHAn OS command injection vulnerability exists in the ys_thirdparty system_user_script functionality of Milesight UR32L v32.3.0.5. A speciallyEPSS 3.7%CVE-2026-19771HIGHBaicells EG3661M LuCI Web luci os command injectionEPSS 3.7%CVE-2023-24805HIGHCommand injection in cups-filtersEPSS 3.7%CVE-2024-5421HIGHAuthenticated Command InjectionEPSS 3.7%CVE-2022-1440CRITICALCommand Injection vulnerability in git-interface@2.1.1 in yarkeev/git-interfaceEPSS 3.7%CVE-2026-24663CRITICALCopeland XWEB and XWEB Pro OS Command InjectionEPSS 3.7%CVE-2024-20720CRITICALCommand injection in data collector backup due to insufficient patching of CVE-2023-38208EPSS 3.7%