Weaknesses of type CWE-78

4,602 results

Injeção de comandos do sistema operacional

A aplicação constrói comandos do SO usando entrada do usuário sem sanitizar adequadamente, permitindo que um atacante injete comandos arbitrários. Quando a entrada contém metacaracteres (como `|`, `;`, `&&`, backticks), o shell interpreta-os como operadores, executando código não intencional com os privilégios da aplicação.

Example

Um script PHP que executa `system('ping ' . $_GET['host'])` permite um atacante passar `127.0.0.1; rm -rf /` como parâmetro, executando deleção de arquivos. Ou em Java, `Runtime.exec()` com strings concatenadas do usuário sem validação.

How to mitigate

Use APIs que não invocam shell (ex: `execvp()` em C, arrays de parâmetros em Java/Python, ou prepared commands). Se inevitável usar shell, escape rigorosamente com funções específicas (`escapeshellarg()` em PHP) ou valide contra whitelist de caracteres permitidos. Nunca confie em blacklist de caracteres perigosos.

CVE-2014-125124CRITICALPandora FMS <= 5.0RC1 Anyterm Unauthenticated Command InjectionEPSS 2.1%CVE-2024-41315MEDIUMTOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_eEPSS 2.1%CVE-2026-45322HIGHOS Command Injection in Microsoft UFO Shell Action Replay via Stored Session JSONEPSS 2.1%CVE-2024-48630HIGHD-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the MacAddress parametEPSS 2.1%CVE-2025-44961CRITICALIn RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated uEPSS 2.1%CVE-2019-25158MEDIUMpedroetb tts-api app.js onSpeechDone os command injectionEPSS 2.1%CVE-2021-1487HIGHCisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Command Injection VulnerabilityEPSS 2.1%CVE-2026-7443MEDIUMBurtTheCoder mcp-dnstwist MCP index.ts fuzz_domain os command injectionEPSS 2.1%CVE-2026-76761MEDIUMchenhg5 cc-connect Management API engine.go shellExecCommand os command injectionEPSS 2.1%CVE-2026-7061MEDIUMToowiredd chatgpt-mcp-server MCP/HTTP docker.service.ts os command injectionEPSS 2.1%CVE-2026-5802MEDIUMidachev mcp-javadc HTTP os command injectionEPSS 2.1%CVE-2026-14802MEDIUMreact create-react-app react-dev-utils openBrowser.js startBrowserProcess os command injectionEPSS 2.1%CVE-2026-90690MEDIUM0x4m4 HexStrike AI API Tools Endpoint hexstrike_server.py subprocess.Popen os command injectionEPSS 2.1%CVE-2026-7062MEDIUMIntina47 context-sync Git Integration git-integration.ts os command injectionEPSS 2.1%CVE-2026-30302CRITICALThe command auto-approval module in CodeRider-Kilo contains an OS Command Injection vulnerability, rendering its whitelist security mechanisEPSS 2.1%CVE-2026-7416MEDIUMPolarVista xcode-mcp-server MCP index.ts run_tests os command injectionEPSS 2.1%CVE-2026-6130MEDIUMchatboxai chatbox Model Context Protocol Server Management System ipc-stdio-transport.ts StdioClientTransport os command injectionEPSS 2.1%CVE-2024-48632HIGHD-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain multiple command injection vulnerabilities via the LocalIPAdEPSS 2.1%CVE-2024-48633HIGHD-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain multiple command injection vulnerabilities via the ExternalPEPSS 2.1%CVE-2023-36549HIGHA improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.EPSS 2.1%