Fallos del tipo CWE-78

4564 resultados

Injeção de Comando do Sistema Operacional

A aplicação constrói comandos do SO (shell, cmd.exe, etc.) usando dados de entrada do usuário ou de fontes externas sem validar ou sanitizar adequadamente. Um atacante consegue injetar metacaracteres especiais (como ;, |, &, `, $()) para executar comandos arbitrários além daqueles originalmente planejados.

Ejemplo

Uma API que executa `ping hostname` recebendo o hostname como parâmetro GET faz isso: `exec('ping ' + request.query.host)`. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, não apenas fazer ping.

Cómo mitigar

Evite construir comandos concatenando strings com entrada externa — use bibliotecas que parametrizem comandos ou listas de argumentos (como execFile no Node.js, subprocess com lista em Python, ProcessBuilder em Java). Se for inevitável, valide contra uma whitelist rígida e, se disponível, use modo restrito do shell (sh -c com argumentos seguros) ou contenha a execução em sandbox/container.

CVE-2019-1636HIGHCisco Webex Teams URI Handler Insecure Library Loading VulnerabilityEPSS 46.9%CVE-2025-7083MEDIUMBelkin F9K1122 webs mp os command injectionEPSS 45.9%CVE-2024-51568CRITICALCyberPanel (aka Cyber Panel) before 2.3.5 allows Command Injection via completePath in the ProcessUtilities.outputExecutioner() sink. There EPSS 45.7%CVE-2024-28254HIGHSpEL Injection in `GET /api/v1/events/subscriptions/validation/condition/<expr>` in OpenMetadataEPSS 45.7%CVE-2025-64155CRITICALAn improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSIEM 7.4.0, ForEPSS 45.4%CVE-2019-5127CRITICALA command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. ExploitableEPSS 45.3%CVE-2025-43562CRITICALColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)EPSS 45.1%CVE-1999-0043CRITICALCommand execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.EPSS 44.6%CVE-2024-7591CRITICALImproper Input Validation vulnerability in Progress LoadMaster allows OS Command InjectionEPSS 43.5%CVE-2023-25826CRITICALRemote Code Execution in OpenTSDBEPSS 42.8%CVE-2020-10882HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: EPSS 41.4%CVE-2023-4473CRITICALA command injection vulnerability in the web server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(EPSS 41.3%CVE-2022-46476CRITICALD-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgi_main function.EPSS 41.1%CVE-2023-2564CRITICALOS Command Injection in sbs20/scanservjsEPSS 40.5%CVE-2024-53375HIGHAn Authenticated Remote Code Execution (RCE) vulnerability affects the TP-Link Archer router series. A vulnerability exists in the "tmp_get_EPSS 40.5%CVE-2023-39780HIGHOn ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm qos_bw_rulelistEPSS 40.2%KEVCVE-2021-20044—A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated attacker to execute OS systemEPSS 40.1%CVE-2023-35138CRITICALA command injection vulnerability in the “show_zysync_server_contents” function of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAEPSS 40.0%CVE-2025-10230CRITICALSamba: command injection in wins server hook scriptEPSS 39.7%CVE-2019-5129CRITICALA command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. ExploitableEPSS 38.5%