Weaknesses of type CWE-78

5,062 results

Injeção de comandos do sistema operacional

A aplicação constrói comandos do SO usando entrada do usuário sem sanitizar adequadamente, permitindo que um atacante injete comandos arbitrários. Quando a entrada contém metacaracteres (como `|`, `;`, `&&`, backticks), o shell interpreta-os como operadores, executando código não intencional com os privilégios da aplicação.

Example

Um script PHP que executa `system('ping ' . $_GET['host'])` permite um atacante passar `127.0.0.1; rm -rf /` como parâmetro, executando deleção de arquivos. Ou em Java, `Runtime.exec()` com strings concatenadas do usuário sem validação.

How to mitigate

Use APIs que não invocam shell (ex: `execvp()` em C, arrays de parâmetros em Java/Python, ou prepared commands). Se inevitável usar shell, escape rigorosamente com funções específicas (`escapeshellarg()` em PHP) ou valide contra whitelist de caracteres permitidos. Nunca confie em blacklist de caracteres perigosos.

CVE-2026-67261CRITICALDell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) an OS Command Injection vulnerability in EPSS 2.3%CVE-2023-38673CRITICALCommand injection in fs.pyEPSS 2.3%CVE-2026-108804CRITICALTRENDnet TEW-751DR/TEW-752DRU/TEW733GR Web Management Backend pigwidgeon.cgi fwrite os command injectionEPSS 2.3%CVE-2025-56082HIGHOS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request tEPSS 2.3%CVE-2026-75486HIGHSynk Sweater Comb < 3.8.8 Command Injection via .vervet.yaml Branch NameEPSS 2.3%CVE-2024-32766CRITICALQTS, QuTS hero, QuTScloudEPSS 2.3%CVE-2017-9274HIGHosc executes spec code during "osc commit"EPSS 2.3%CVE-2020-15271CRITICALShell Command Execution in lookatmeEPSS 2.3%CVE-2021-32530CRITICALQSAN XEVO - Command Injection Following via Array functionEPSS 2.3%CVE-2018-13284HIGHCommand injection vulnerability in ftpd in Synology Diskstation Manager (DSM) before 6.2-23739-1 allows remote authenticated users to executEPSS 2.3%CVE-2023-42123HIGHControl Web Panel mysql_manager Command Injection Remote Code Execution VulnerabilityEPSS 2.3%CVE-2025-66253CRITICALUnauthenticated OS Command Injection (start_upgrade.php)EPSS 2.3%CVE-2025-66261CRITICALUnauthenticated OS Command Injection (restore_settings.php)EPSS 2.3%CVE-2022-46598CRITICALTRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the wps_sta_enrollee_pin parameter in the action sEPSS 2.3%CVE-2026-22265HIGHRoxy-WI has a Command Injection via grep parameter in logs.py allows authenticated RCEEPSS 2.3%CVE-2022-46597CRITICALTRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the sys_service parameter in the setup_wizard_mydlEPSS 2.3%CVE-2023-1350MEDIUMliferea Feed Enrichment update.c update_job_run os command injectionEPSS 2.3%CVE-2024-50388CRITICALHBS 3 Hybrid Backup SyncEPSS 2.3%CVE-2024-14003CRITICALNagios XI < 2024R1.2 RCE via NRDP Server PluginsEPSS 2.3%CVE-2022-45996HIGHTenda W20E V16.01.0.6(3392) is vulnerable to Command injection via cmd_get_ping_output.EPSS 2.3%