Fallos del tipo CWE-78

5061 resultados

Injeção de Comando do Sistema Operacional

A aplicação constrói comandos do SO (shell, cmd.exe, etc.) usando dados de entrada do usuário ou de fontes externas sem validar ou sanitizar adequadamente. Um atacante consegue injetar metacaracteres especiais (como ;, |, &, `, $()) para executar comandos arbitrários além daqueles originalmente planejados.

Ejemplo

Uma API que executa `ping hostname` recebendo o hostname como parâmetro GET faz isso: `exec('ping ' + request.query.host)`. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, não apenas fazer ping.

Cómo mitigar

Evite construir comandos concatenando strings com entrada externa — use bibliotecas que parametrizem comandos ou listas de argumentos (como execFile no Node.js, subprocess com lista em Python, ProcessBuilder em Java). Se for inevitável, valide contra uma whitelist rígida e, se disponível, use modo restrito do shell (sh -c com argumentos seguros) ou contenha a execução em sandbox/container.

CVE-2025-56127HIGHOS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request tEPSS 3.1%CVE-2022-50793HIGHSOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Authenticated Command Injection via www-data-handler.phpEPSS 3.1%CVE-2026-25857HIGHTenda G300-F Command Injection via formSetWanDiagEPSS 3.1%CVE-2021-22795CRITICALA CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause reEPSS 3.1%CVE-2025-50196HIGHChamilo: OS Command Injection in /plugin/vchamilo/views/editinstance.php via POST main_database parameterEPSS 3.1%CVE-2022-3008HIGHCommand Injection on tinygltfEPSS 3.1%CVE-2026-17179HIGHIBM Db2 Mirror for i is affected by multiple vulnerabilitiesEPSS 3.1%CVE-2026-94579MEDIUMAn OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session terminEPSS 3.1%CVE-2025-11141MEDIUMRuijie NBR2100G-E branch_passw.php listAction os command injectionEPSS 3.1%CVE-2026-41923CRITICALWDR201A WiFi Extender OS Command Injection via internet.cgiEPSS 3.1%CVE-2025-64756HIGHglob CLI: Command injection via -c/--cmd executes matches with shell:trueEPSS 3.1%CVE-2024-7171MEDIUMTOTOLINK A3600R cstecgi.cgi NTPSyncWithHost os command injectionEPSS 3.1%CVE-2024-7175MEDIUMTOTOLINK A3600R cstecgi.cgi setDiagnosisCfg os command injectionEPSS 3.1%CVE-2020-2507CRITICALcommand injection vulnerability in HelpdeskEPSS 3.1%CVE-2020-15631HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 1.04B03_HOTFIX WEPSS 3.1%CVE-2024-8574MEDIUMTOTOLINK AC1200 T8 cstecgi.cgi setParentalRules os command injectionEPSS 3.1%CVE-2022-25912HIGHRemote Code Execution (RCE)EPSS 3.1%CVE-2026-110957CRITICALWavlink WL-WN530BE2-A Login Processing api.cgi sub_12580 os command injectionEPSS 3.1%CVE-2026-9254HIGHCommand Injection Vulnerability in Parent Control of Multiple TP-Link Archer DevicesEPSS 3.1%CVE-2020-12522CRITICALCommand Injection Vulnerability in I/O-Check Service of WAGO PFC100, PFC200 and Touch Panel 600 Series with firmware versions <=FW10EPSS 3.1%