CWE-77: Command injection
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in a Command.
A kind of CWE-74 Injection.
From the CWE List. © The MITRE Corporation.
Newest
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setAppCfg os command injection9.3 Critical
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setNetworkCfg os command injection9.3 Critical
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setTtyServiceCfg os command injection9.3 Critical
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setRadvdCfg os command injection9.3 Critical
- 1panel-dev maxkb1Panel-dev MaxKB Model Context Protocol Node base_mcp_node.py execute os command injection5.3 Medium
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setVpnAccountCfg os command injection9.3 Critical
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setPptpServerCfg os command injection9.3 Critical
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setUrlFilterRules os command injection9.3 Critical
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setPortalConfWeChat os command injection9.3 Critical
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setSyslogCfg os command injection9.3 Critical
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setLoginPasswordCfg os command injection9.3 Critical
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setAdvancedInfoShow os command injection9.3 Critical
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setMiniuiHomeInfoShow os command injection9.3 Critical
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setTelnetCfg os command injection9.3 Critical
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setWiFiGuestCfg os command injection9.3 Critical
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setWiFiAclRules os command injection9.3 Critical
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setWiFiBasicCfg os command injection9.3 Critical
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setStorageCfg os command injection9.3 Critical
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setDmzCfg os command injection9.3 Critical
- deepwisdom metagptFoundationAgents MetaGPT terminal.py Bash.run os command injection6.9 Medium
- deepwisdom metagptFoundationAgents MetaGPT common.py get_mime_type os command injection6.9 Medium
- deepwisdom metagptFoundationAgents MetaGPT terminal.py Terminal.run_command os command injection6.9 Medium
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setWiFiEasyCfg os command injection9.3 Critical
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setIpv6LanCfg os command injection9.3 Critical
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setIptvCfg os command injection9.3 Critical
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setUPnPCfg os command injection9.3 Critical
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setVpnPassCfg os command injection9.3 Critical
- d-link dir-882, dlink dir-882 firmware +1 moreD-Link DIR-882 HNAP1 SetNetworkSettings prog.cgi sprintf os command injection8.6 High
- awwaiid mcp-server-taskwarriorawwaiid mcp-server-taskwarrior index.ts server.setRequestHandler command injection4.8 Medium
- agions taskflow-aiAgions taskflow-ai terminal_execute handlers.ts os command injection5.3 Medium
- totolink a3300r firmwareAn issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to...9.8 Critical
- idachev mcp-javadcidachev mcp-javadc HTTP os command injection6.9 Medium
- suvarchal docker-mcp-serversuvarchal docker-mcp-server HTTP index.ts pull_image os command injection6.9 Medium
- nokia mantaray nmAn OS Command Injection vulnerability in Nokia MantaRay NM8.0 High
- totolink a7100ruTotolink A7100RU cstecgi.cgi setGameSpeedCfg os command injection6.9 Medium
- totolink a7100ruTotolink A7100RU cstecgi.cgi setFirewallType os command injection6.9 Medium
- totolink a7100ruTotolink A7100RU cstecgi.cgi setRemoteCfg os command injection6.9 Medium
- totolink a7100ruTotolink A7100RU cstecgi.cgi setNtpCfg os command injection6.9 Medium
- totolink a7100ruTotolink A7100RU cstecgi.cgi setDdnsCfg os command injection6.9 Medium
- totolink a3300rTotolink A3300R cstecgi.cgi vsetTr069Cfg os command injection5.1 Medium
- totolink a7100ruTotolink A7100RU cstecgi.cgi setScheduleCfg os command injection6.9 Medium
- totolink a7100ruTotolink A7100RU cstecgi.cgi CsteSystem os command injection6.9 Medium
- offis dcmtkOFFIS DCMTK storescp storescp.cc executeOnEndOfStudy os command injection6.9 Medium
- chrischinchilla vale-mcpChrisChinchilla Vale-MCP HTTP index.ts os command injection4.8 Medium
- braffolk mcp-summarization-functionsBraffolk mcp-summarization-functions summarize_command mcp-server.ts os command injection4.8 Medium
- nationalsecurityagency emissaryEmissary has GitHub Actions Shell Injection via Workflow Inputs9.1 Critical
- utt 520w firmwareA remote command execution (RCE) vulnerability in the /goform/formDia component of UTT Aggressive...9.8 Critical
- elgentos magento2-dev-mcpelgentos magento2-dev-mcp index.ts executeMagerun2Command os command injection4.8 Medium
- nor2-io heim-mcpNor2-io heim-mcp new_heim_application tools.ts registerTools os command injection4.8 Medium
- tenda ac10, ac10 firmware +1 moreTenda AC10 httpd formAddMacfilterRule os command injection5.3 Medium
- Show moreLoading…