Fallos del tipo CWE-78

4578 resultados

Injeção de Comando do Sistema Operacional

A aplicação constrói comandos do SO (shell, cmd.exe, etc.) usando dados de entrada do usuário ou de fontes externas sem validar ou sanitizar adequadamente. Um atacante consegue injetar metacaracteres especiais (como ;, |, &, `, $()) para executar comandos arbitrários além daqueles originalmente planejados.

Ejemplo

Uma API que executa `ping hostname` recebendo o hostname como parâmetro GET faz isso: `exec('ping ' + request.query.host)`. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, não apenas fazer ping.

Cómo mitigar

Evite construir comandos concatenando strings com entrada externa — use bibliotecas que parametrizem comandos ou listas de argumentos (como execFile no Node.js, subprocess com lista em Python, ProcessBuilder em Java). Se for inevitável, valide contra uma whitelist rígida e, se disponível, use modo restrito do shell (sh -c com argumentos seguros) ou contenha a execução em sandbox/container.

CVE-2025-30004HIGHXorcom CompletePBX <= 5.2.35 Task Scheduler Authenticated Command InjectionEPSS 4.2%CVE-2022-50795HIGHSOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Conditional Command Injection via traceroute.phpEPSS 4.2%CVE-2023-37903CRITICALSandbox Escape in vm2EPSS 4.2%CVE-2026-33482HIGHAVideo has an OS Command Injection via $() Shell Substitution Bypass in sanitizeFFmpegCommand()EPSS 4.2%CVE-2025-11138MEDIUMmirweiye wenkucms common.php createPathOne os command injectionEPSS 4.2%CVE-2017-6714—A vulnerability in the AutoIT service of Cisco Ultra Services Framework Staging Server could allow an unauthenticated, remote attacker to exEPSS 4.2%CVE-2026-56413CRITICALOS Command Injection in StoneFly Storage ConcentratorEPSS 4.2%CVE-2024-53584CRITICALOpenPanel v0.3.4 was discovered to contain an OS command injection vulnerability via the timezone parameter.EPSS 4.2%CVE-2021-20035MEDIUMImproper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary coEPSS 4.2%KEVCVE-2022-25168—Command injection in org.apache.hadoop.fs.FileUtil.unTarUsingTarEPSS 4.2%CVE-2023-26482CRITICALScope of workflow operations is not validated in nextcloud serverEPSS 4.2%CVE-2023-6309MEDIUMmoses-smt mosesdecoder trans_result.php os command injectionEPSS 4.2%CVE-2024-14005CRITICALNagios XI < 2024R1.2 Command Injection via Docker WizardEPSS 4.1%CVE-2025-34284CRITICALNagios XI < 2024R2 Authenticated Command Injection via WinRM PluginEPSS 4.1%CVE-2026-7609MEDIUMTRENDnet TEW-821DAP Firmware Udpate diagnostic tools_diagnostic os command injectionEPSS 4.1%CVE-2022-50596CRITICALD-Link DIR-1260 <= v1.20B05 GetDeviceSettings Unauthenticated Command InjectionEPSS 4.1%CVE-2021-27476CRITICALRockwell Automation FactoryTalk AssetCentre OS Command InjectionEPSS 4.1%CVE-2026-8632HIGHHP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code ExecutionEPSS 4.1%CVE-2026-61498CRITICALVitec Flamingo 4.12.2 Unauthenticated OS Command Injection via gen_graphs.phpEPSS 4.1%CVE-2022-40189CRITICALApache Airlfow Pig Provider RCEEPSS 4.1%