Weaknesses of type CWE-78

5,063 results

Injeção de comandos do sistema operacional

A aplicação constrói comandos do SO usando entrada do usuário sem sanitizar adequadamente, permitindo que um atacante injete comandos arbitrários. Quando a entrada contém metacaracteres (como `|`, `;`, `&&`, backticks), o shell interpreta-os como operadores, executando código não intencional com os privilégios da aplicação.

Example

Um script PHP que executa `system('ping ' . $_GET['host'])` permite um atacante passar `127.0.0.1; rm -rf /` como parâmetro, executando deleção de arquivos. Ou em Java, `Runtime.exec()` com strings concatenadas do usuário sem validação.

How to mitigate

Use APIs que não invocam shell (ex: `execvp()` em C, arrays de parâmetros em Java/Python, ou prepared commands). Se inevitável usar shell, escape rigorosamente com funções específicas (`escapeshellarg()` em PHP) ou valide contra whitelist de caracteres permitidos. Nunca confie em blacklist de caracteres perigosos.

CVE-2025-54135HIGHCursor Agent is vulnerable to prompt injection via MCP Special FilesEPSS 2.1%CVE-2024-2162HIGHAuthenticated Remote Code Execution in Kiloview NDI N series productsEPSS 2.1%CVE-2026-101007CRITICALaaPanel BaoTa Database Backup database.py InputSql os command injectionEPSS 2.1%CVE-2026-90617MEDIUMGH05TCREW PentestAgent MCP HTTP Server main.py run_task os command injectionEPSS 2.1%CVE-2023-3991CRITICALOS command injection vulnerability in FreshTomato 2023.3EPSS 2.1%CVE-2026-90618MEDIUMGH05TCREW PentestAgent LocalRuntime runtime.py LocalRuntime.execute_command os command injectionEPSS 2.1%CVE-2026-105484CRITICALTOTOLINK X6000R UploadFirmwareFile cstecgi.cgi firmware_check os command injectionEPSS 2.1%CVE-2024-1624CRITICALOS Command Injection vulnerability affecting documentation server on certain Releases of 3DEXPERIENCE, SIMULIA Abaqus, SIMULIA Isight and CATIA ComposerEPSS 2.1%CVE-2026-85040MEDIUMZhongBangKeJi CRMEB Custom Scheduled Task Feature save eval os command injectionEPSS 2.1%CVE-2021-32512CRITICALQSAN Storage Manager - Command Injection Following via QuickInstall functionEPSS 2.1%CVE-2021-32513CRITICALQSAN Storage Manager - Command Injection Following via QsanTorture functionEPSS 2.1%CVE-2024-30247CRITICALCommand Injection as root in NextCloudPi web panelEPSS 2.1%CVE-2020-27861HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers. AEPSS 2.1%CVE-2025-5106MEDIUMFujian Kelixun Filename fax_view.php os command injectionEPSS 2.1%CVE-2025-54074HIGHCherry Studio is Vulnerable to OS Command Injection during Connection with a Malicious MCP ServerEPSS 2.1%CVE-2026-27811HIGHRoxy-WI has a Command Injection via diff parameter in config comparison allows authenticated RCEEPSS 2.1%CVE-2026-110646CRITICALBeganovich snappdf 1.1.0 before 6.1.0 OS Command Injection on Windows via setUrl()EPSS 2.1%CVE-2023-39295HIGHQuMagieEPSS 2.1%CVE-2024-41315MEDIUMTOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_eEPSS 2.1%CVE-2024-48630HIGHD-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the MacAddress parametEPSS 2.1%