Weaknesses of type CWE-78

4,601 results

Injeção de comandos do sistema operacional

A aplicação constrói comandos do SO usando entrada do usuário sem sanitizar adequadamente, permitindo que um atacante injete comandos arbitrários. Quando a entrada contém metacaracteres (como `|`, `;`, `&&`, backticks), o shell interpreta-os como operadores, executando código não intencional com os privilégios da aplicação.

Example

Um script PHP que executa `system('ping ' . $_GET['host'])` permite um atacante passar `127.0.0.1; rm -rf /` como parâmetro, executando deleção de arquivos. Ou em Java, `Runtime.exec()` com strings concatenadas do usuário sem validação.

How to mitigate

Use APIs que não invocam shell (ex: `execvp()` em C, arrays de parâmetros em Java/Python, ou prepared commands). Se inevitável usar shell, escape rigorosamente com funções específicas (`escapeshellarg()` em PHP) ou valide contra whitelist de caracteres permitidos. Nunca confie em blacklist de caracteres perigosos.

CVE-2025-34049CRITICALOptiLink ONT1GEW GPON Remote Code ExecutionEPSS 2.4%CVE-2020-8273—Privilege escalation of an authenticated user to root in Citrix SD-WAN center versions before 11.2.2, 11.1.2b and 10.2.8.EPSS 2.4%CVE-2025-56087HIGHOS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request tEPSS 2.4%CVE-2022-50909HIGHAlgo 8028 Control Panel - Remote Code Execution (RCE) (Authenticated)EPSS 2.4%CVE-2021-21954CRITICALA command execution vulnerability exists in the wifi_country_code_update functionality of the home_security binary of Anker Eufy Homebase 2 EPSS 2.4%CVE-2023-3991CRITICALOS command injection vulnerability in FreshTomato 2023.3EPSS 2.4%CVE-2026-67608HIGHTelenia TVox 26.5.3 OS Command Injection via action_audio.phpEPSS 2.4%CVE-2026-67599HIGHClearOS 7.9 OS Command Injection via Log Viewer filter parameterEPSS 2.4%CVE-2021-21302MEDIUMCSV Injection via csv exportEPSS 2.4%CVE-2026-40520HIGHFreePBX api module Command Injection via GraphQLEPSS 2.4%CVE-2026-32833HIGHCudy LT300 3.0 OS Command Injection via NTP ConfigurationEPSS 2.4%CVE-2025-1676MEDIUMhzmanyun Education and Training System pdf2swf os command injectionEPSS 2.4%CVE-2022-25171HIGHCommand InjectionEPSS 2.4%CVE-2026-66297MEDIUMUnescaped deployment environment variables in generated setup commandsEPSS 2.4%CVE-2026-90492MEDIUMwebgjc web_robot web.py controller_recover os command injectionEPSS 2.4%CVE-2026-85542HIGHIBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 2.4%CVE-2025-64126CRITICALZenitel TCIV-3+ OS Command InjectionEPSS 2.4%CVE-2025-64128CRITICALZenitel TCIV-3+ OS Command InjectionEPSS 2.4%CVE-2025-64127CRITICALZenitel TCIV-3+ OS Command InjectionEPSS 2.4%CVE-2023-40505CRITICALLG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution VulnerabilityEPSS 2.4%