Weaknesses of type CWE-78

5,063 results

Injeção de comandos do sistema operacional

A aplicação constrói comandos do SO usando entrada do usuário sem sanitizar adequadamente, permitindo que um atacante injete comandos arbitrários. Quando a entrada contém metacaracteres (como `|`, `;`, `&&`, backticks), o shell interpreta-os como operadores, executando código não intencional com os privilégios da aplicação.

Example

Um script PHP que executa `system('ping ' . $_GET['host'])` permite um atacante passar `127.0.0.1; rm -rf /` como parâmetro, executando deleção de arquivos. Ou em Java, `Runtime.exec()` com strings concatenadas do usuário sem validação.

How to mitigate

Use APIs que não invocam shell (ex: `execvp()` em C, arrays de parâmetros em Java/Python, ou prepared commands). Se inevitável usar shell, escape rigorosamente com funções específicas (`escapeshellarg()` em PHP) ou valide contra whitelist de caracteres permitidos. Nunca confie em blacklist de caracteres perigosos.

CVE-2020-2508HIGHCommand Injection Vulnerability in QTS and QuTS heroEPSS 1.9%CVE-2026-24700HIGHAn OS command injection vulnerability exists in the start_lltd() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 anEPSS 1.9%CVE-2026-36044HIGH@pensar/apex <= 0.0.58 is vulnerable to OS command injection via the smart_enumerate tool. The createSmartEnumerateTool() function in src/coEPSS 1.9%CVE-2012-10037CRITICALPhpTax pfilez Parameter Exec Remote Code InjectionEPSS 1.8%CVE-2013-10053HIGHZPanel <= 10.0.0.2 htpasswd Module Username Command ExecutionEPSS 1.8%CVE-2026-23520CRITICALArcane has a Command Injection in Arcane Updater Lifecycle Labels Enables RCEEPSS 1.8%CVE-2025-63414CRITICALA Path Traversal vulnerability in the Allsky WebUI version v2024.12.06_06 allows an unauthenticated remote attacker to achieve arbitrary comEPSS 1.8%CVE-2026-107703CRITICAL@enmaso/node-convert through 1.0.0 OS Command Injection via filepath and convertToEPSS 1.8%CVE-2026-22550HIGHOS command injection vulnerability exists in ELECOM wireless LAN products. A crafted request from a logged-in user may lead to an arbitrary EPSS 1.8%CVE-2026-0756CRITICALgithub-kanban-mcp-server execAsync Command Injection Remote Code Execution VulnerabilityEPSS 1.8%CVE-2022-1884CRITICALRemote Command Execution in gogs/gogsEPSS 1.8%CVE-2024-55020CRITICALA command injection vulnerability in the DHCP activation feature of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows attEPSS 1.8%CVE-2026-6116CRITICALTotolink A7100RU CGI cstecgi.cgi setDiagnosisCfg os command injectionEPSS 1.8%CVE-2026-5997CRITICALTotolink A7100RU CGI cstecgi.cgi setLoginPasswordCfg os command injectionEPSS 1.8%CVE-2026-6114CRITICALTotolink A7100RU CGI cstecgi.cgi setNetworkCfg os command injectionEPSS 1.8%CVE-2026-5976CRITICALTotolink A7100RU CGI cstecgi.cgi setStorageCfg os command injectionEPSS 1.8%CVE-2026-6113CRITICALTotolink A7100RU CGI cstecgi.cgi setTtyServiceCfg os command injectionEPSS 1.8%CVE-2026-6112CRITICALTotolink A7100RU CGI cstecgi.cgi setRadvdCfg os command injectionEPSS 1.8%CVE-2026-5993CRITICALTotolink A7100RU CGI cstecgi.cgi setWiFiGuestCfg os command injectionEPSS 1.8%CVE-2026-5975CRITICALTotolink A7100RU CGI cstecgi.cgi setDmzCfg os command injectionEPSS 1.8%