Fallos del tipo CWE-78

4977 resultados

Injeção de Comando do Sistema Operacional

A aplicação constrói comandos do SO (shell, cmd.exe, etc.) usando dados de entrada do usuário ou de fontes externas sem validar ou sanitizar adequadamente. Um atacante consegue injetar metacaracteres especiais (como ;, |, &, `, $()) para executar comandos arbitrários além daqueles originalmente planejados.

Ejemplo

Uma API que executa `ping hostname` recebendo o hostname como parâmetro GET faz isso: `exec('ping ' + request.query.host)`. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, não apenas fazer ping.

Cómo mitigar

Evite construir comandos concatenando strings com entrada externa — use bibliotecas que parametrizem comandos ou listas de argumentos (como execFile no Node.js, subprocess com lista em Python, ProcessBuilder em Java). Se for inevitável, valide contra uma whitelist rígida e, se disponível, use modo restrito do shell (sh -c com argumentos seguros) ou contenha a execução em sandbox/container.

CVE-2023-39780HIGHOn ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm qos_bw_rulelistEPSS 39.5%KEVCVE-2024-7591CRITICALImproper Input Validation vulnerability in Progress LoadMaster allows OS Command InjectionEPSS 39.2%CVE-2019-5129CRITICALA command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. ExploitableEPSS 38.5%CVE-2023-51572CRITICALVoltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution VulnerabilityEPSS 38.4%CVE-2025-34143CRITICALETQ Reliance CG Authentication Bypass via Trailing Space RCEEPSS 38.0%CVE-2023-39367CRITICALAn OS command injection vulnerability exists in the web interface mac2name functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specialEPSS 37.7%CVE-2024-0921MEDIUMD-Link DIR-816 A2 Web Interface setDeviceSettings os command injectionEPSS 37.6%CVE-2019-11001HIGHOn Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an authenticated admin can use the "TestEmail" functionEPSS 37.5%KEVCVE-2019-15978HIGHCisco Data Center Network Manager Command Injection VulnerabilitiesEPSS 37.5%CVE-2021-21881CRITICALAn OS command injection vulnerability exists in the Web Manager Wireless Network Scanner functionality of Lantronix PremierWave 2050 8.9.0.0EPSS 36.9%CVE-2021-47667CRITICALAn OS command injection vulnerability in lib/NSSDropoff.php in ZendTo 5.24-3 through 6.x before 6.10-7 allows unauthenticated remote attackeEPSS 36.6%CVE-2022-0848CRITICALOS Command Injection in part-db/part-dbEPSS 35.4%CVE-2024-45242HIGHEnGenius ENH1350EXT A8J-ENH1350EXT devices through 3.9.3.2_c1.9.51 allow (blind) OS Command Injection via shell metacharacters to the Ping oEPSS 35.4%CVE-2024-12986MEDIUMDrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupptim os command injectionEPSS 35.3%CVE-2022-40005HIGHIntelbras WiFiber 120AC inMesh before 1-1-220826 allows command injection by authenticated users, as demonstrated by the /boaform/formPing6 EPSS 35.0%CVE-2022-45025CRITICALMarkdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom was discovered to contain a command injection vulnerability via the PDF filEPSS 34.8%CVE-2025-28137CRITICALThe TOTOLINK A810R V4.1.2cu.5182_B20201026 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg functEPSS 34.1%CVE-2020-2509CRITICALCommand Injection Vulnerability in QTS and QuTS heroEPSS 34.0%KEVCVE-2023-37569HIGHOS Command Injection Vulnerability in Emagic Data Center Management SuiteEPSS 33.9%CVE-2023-2522MEDIUMChengdu VEC40G Network Detection os command injectionEPSS 33.7%