Fallos del tipo CWE-78

4603 resultados

Injeção de Comando do Sistema Operacional

A aplicação constrói comandos do SO (shell, cmd.exe, etc.) usando dados de entrada do usuário ou de fontes externas sem validar ou sanitizar adequadamente. Um atacante consegue injetar metacaracteres especiais (como ;, |, &, `, $()) para executar comandos arbitrários além daqueles originalmente planejados.

Ejemplo

Uma API que executa `ping hostname` recebendo o hostname como parâmetro GET faz isso: `exec('ping ' + request.query.host)`. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos do servidor, não apenas fazer ping.

Cómo mitigar

Evite construir comandos concatenando strings com entrada externa — use bibliotecas que parametrizem comandos ou listas de argumentos (como execFile no Node.js, subprocess com lista em Python, ProcessBuilder em Java). Se for inevitável, valide contra uma whitelist rígida e, se disponível, use modo restrito do shell (sh -c com argumentos seguros) ou contenha a execução em sandbox/container.

CVE-2022-3874HIGHOs command injection via ct_command and fcct_commandEPSS 2.2%CVE-2022-44019HIGHIn Total.js 4 before 0e5ace7, /api/common/ping can achieve remote command execution via shell metacharacters in the host parameter.EPSS 2.2%CVE-2022-42496CRITICALOS command injection vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to EPSS 2.2%CVE-2022-41642CRITICALOS command injection vulnerability in Nadesiko3 (PC Version) v3.3.61 and earlier allows a remote attacker to execute an arbitrary OS commandEPSS 2.2%CVE-2019-12811—ActiveX Control in MyBuilder before 6.2.2019.814 allow an attacker to execute arbitrary command via the ShellOpen method. This can be leveraEPSS 2.2%CVE-2026-30311CRITICALRidvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanEPSS 2.2%CVE-2025-43879CRITICALWRH-733GBK and WRH-733GWH contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilitEPSS 2.2%CVE-2026-30314CRITICALRidvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanEPSS 2.2%CVE-2025-48890CRITICALWRH-733GBK and WRH-733GWH contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilitEPSS 2.2%CVE-2025-41709CRITICALCommand injection in power analyzer via Modbus-TCP and Modbus-RTUEPSS 2.2%CVE-2024-48635HIGHD-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the VLANID:2/VID paramEPSS 2.1%CVE-2026-8913HIGHCommand Injection in TP-Link's Archer MR600 WireGuard Client ConfigurationEPSS 2.1%CVE-2024-48636HIGHD-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the VLANID:0/VID paramEPSS 2.1%CVE-2024-48638HIGHD-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the SubnetMask parametEPSS 2.1%CVE-2024-48637HIGHD-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the VLANID:1/VID paramEPSS 2.1%CVE-2024-48629HIGHD-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the IPAddress parameteEPSS 2.1%CVE-2026-63766CRITICALGPT-SoVITS 20250606v2pro OS Command Injection via webui.pyEPSS 2.1%CVE-2025-54074HIGHCherry Studio is Vulnerable to OS Command Injection during Connection with a Malicious MCP ServerEPSS 2.1%CVE-2024-48631HIGHD-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the SSID parameter in EPSS 2.1%CVE-2024-14003CRITICALNagios XI < 2024R1.2 RCE via NRDP Server PluginsEPSS 2.1%