Fallos del tipo CWE-74

4853 resultados

Injeção de código ou comando

A aplicação constrói comandos ou queries dinâmicas concatenando entrada do usuário sem sanitização adequada, permitindo que um atacante injete código ou comandos maliciosos que serão executados com as permissões da aplicação. O risco é crítico porque o atacante passa a controlar a lógica de execução.

Ejemplo

Um login que monta a query SQL como `SELECT * FROM users WHERE email = '` + email_usuario + `'` permite que um atacante envie `admin@mail.com' OR '1'='1` e contorne autenticação. Ou um script que executa `system('ping ' + host_externo)` deixa aberto para injetar `; rm -rf /` e deletar arquivos.

Cómo mitigar

Use prepared statements (queries parametrizadas) para banco de dados, escape adequado para sistema operacional, e valide entrada contra um whitelist restrito. Nunca confie em concatenação de strings para montar comandos dinâmicos.

CVE-2026-10204MEDIUMOFCMS JSON Query SysUserController.java query sql injectionEPSS 0.2%CVE-2026-100898MEDIUMDevaslanPHP project-management Timesheet Dashboard ActivitiesReport.php whereRaw sql injectionEPSS 0.2%CVE-2026-100312MEDIUMmathurvishal CloudClassroom-PHP-Project updateguest.php sql injectionEPSS 0.2%CVE-2026-16729MEDIUMundici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fieldsEPSS 0.2%CVE-2026-11511MEDIUMBolt CMS HTML Attribute TextType.php HTML injectionEPSS 0.2%CVE-2026-19857MEDIUMFormidable Forms < 6.35 - Unauthenticated Arbitrary Shortcode Execution via [entry_key] Custom HTML TokenEPSS 0.2%CVE-2026-105225MEDIUMosCommerce osCommerce2 Payment payment.php include code injectionEPSS 0.2%CVE-2025-8154MEDIUMHTTP Header Injection via Webhook API in Multiple WSO2 Products Allows Response Header ManipulationEPSS 0.2%CVE-2026-4530MEDIUMapconw Aix-DB terminology_retriever.py sql injectionEPSS 0.2%CVE-2026-19855MEDIUMSpam protection, Honeypot, Anti-Spam by CleanTalk < 6.87 - Unauthenticated Arbitrary Shortcode Execution via Comment TextEPSS 0.2%CVE-2026-86601MEDIUMWP Recipe Maker < 10.8.2 - Unauthenticated Arbitrary Shortcode Execution via Comment ContentEPSS 0.2%CVE-2026-19856MEDIUMAll in One SEO < 5.0.2.1 - Unauthenticated Arbitrary Shortcode Execution via Search QueryEPSS 0.2%CVE-2026-92924MEDIUMUnlimited Elements For Elementor < 2.0.21 - Subscriber+ Arbitrary Shortcode Execution via get_addon_output_dataEPSS 0.2%CVE-2026-10688MEDIUMahujasid blender-mcp server.py execute_blender_code code injectionEPSS 0.2%CVE-2026-11927MEDIUMSecurity vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify AccessEPSS 0.2%CVE-2026-86612MEDIUMNinja Tables < 5.2.17 - Unauthenticated Arbitrary Shortcode Execution via Fluent Forms Data SourceEPSS 0.2%CVE-2026-19698LOWGutenKit < 2.5.1 - Contributor+ Stored CSS InjectionEPSS 0.2%CVE-2025-13462LOWtarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handlingEPSS 0.2%CVE-2026-95832CRITICALReflected unknown field names in the kitty colour control escape code allow command execution in the user's shellEPSS 0.2%CVE-2026-0972MEDIUMHTML Injection possible in system generated emails in Fortra's GoAnywhere MFTEPSS 0.2%