Weaknesses of type CWE-78

4,601 results

Injeção de comandos do sistema operacional

A aplicação constrói comandos do SO usando entrada do usuário sem sanitizar adequadamente, permitindo que um atacante injete comandos arbitrários. Quando a entrada contém metacaracteres (como `|`, `;`, `&&`, backticks), o shell interpreta-os como operadores, executando código não intencional com os privilégios da aplicação.

Example

Um script PHP que executa `system('ping ' . $_GET['host'])` permite um atacante passar `127.0.0.1; rm -rf /` como parâmetro, executando deleção de arquivos. Ou em Java, `Runtime.exec()` com strings concatenadas do usuário sem validação.

How to mitigate

Use APIs que não invocam shell (ex: `execvp()` em C, arrays de parâmetros em Java/Python, ou prepared commands). Se inevitável usar shell, escape rigorosamente com funções específicas (`escapeshellarg()` em PHP) ou valide contra whitelist de caracteres permitidos. Nunca confie em blacklist de caracteres perigosos.

CVE-2021-33841CRITICALCircutor SGE-PLC1000 OS command InjectionEPSS 2.2%CVE-2024-53940HIGHAn issue was discovered in Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0) devices. Certain /cgi-bin/luci/admin eEPSS 2.2%CVE-2025-34286CRITICALNagios XI < 2026R1 RCE via Run Check Command in CCMEPSS 2.2%CVE-2025-34134CRITICALNagios XI < 2024R1.4.2 RCE via Business Process Intelligence (BPI)EPSS 2.2%CVE-2024-14008CRITICALNagios XI < 2024R1.3.2 RCE via WinRM Configuration WizardEPSS 2.2%CVE-2024-6247MEDIUMWyze Cam v3 Wi-Fi SSID OS Command Injection Remote Code Execution VulnerabilityEPSS 2.2%CVE-2026-73694HIGHFileRun < 2026.3.0 OS Command Injection via escapeshellcmd() No-Op RedefinitionEPSS 2.2%CVE-2026-64881HIGHCommand InjectionEPSS 2.2%CVE-2026-72603CRITICALwg-easy wg-easy - OS Command InjectionEPSS 2.2%CVE-2023-26156MEDIUMVersions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary sEPSS 2.2%CVE-2020-25849HIGHOpenfind MailGates/MailAudit - Command InjectionEPSS 2.2%CVE-2020-26245HIGHPrototype Pollution leading to Command Injection in systeminformationEPSS 2.2%CVE-2025-66401CRITICALMCP Watch has a Critical Command Injection in cloneRepo allows Remote Code Execution (RCE) via malicious URLEPSS 2.2%CVE-2023-26490HIGHmailcow is vulnerable to shell command injection via xoauth2 authentication in imapsync​EPSS 2.2%CVE-2021-28634HIGHAdobe Acrobat Reader AcrobatUtils.scpt Extension OS Command Injection VulnerabilityEPSS 2.2%CVE-2022-34427HIGHDell Container Storage Modules 1.2 contains an OS Command Injection in goiscsi and gobrick libraries. A remote unauthenticated attacker coulEPSS 2.2%CVE-2026-67325HIGHGitPython before 3.1.51 Command Injection via option prefix abbreviationEPSS 2.2%CVE-2020-2490HIGHIf exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP SysteEPSS 2.2%CVE-2026-5532MEDIUMScrapeGraphAI scrapegraph-ai GenerateCodeNode generate_code_node.py create_sandbox_and_execute os command injectionEPSS 2.2%CVE-2024-50567MEDIUMAn improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb 7.4.0 through 7.6.0 allowEPSS 2.2%