CWE-77: Command injection
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in a Command.
A kind of CWE-74 Injection.
From the CWE List. © The MITRE Corporation.
Newest
- a-g-u-p-t-a wireshark-mcpA-G-U-P-T-A wireshark-mcp pyshark_mcp.py quick_capture os command injection6.9 Medium
- ruby net-imap, ruby-lang net\ +1 morenet-imap: Command Injection via "raw" arguments to multiple commands5.8 Medium
- ruby net-imap, red hat 3scale api management platform 2, enterprise linux 10 +19 more +21 morenet-imap: Command Injection via unvalidated Symbol inputs5.8 Medium
- privsim mcp-test-runnerprivsim mcp-test-runner MCP index.ts child_process.spawn os command injection5.3 Medium
- totolink wa300Totolink WA300 cstecgi.cgi NTPSyncWithHost command injection5.3 Medium
- totolink wa300Totolink WA300 POST Request cstecgi.cgi setLanguageCfg command injection5.3 Medium
- totolink wa300Totolink WA300 POST Request cstecgi.cgi setWebWlanIdx command injection5.3 Medium
- No product listedAn issue in Lymphatus caesium-image-compressor All versions up to and including commit 02da2c6...7.8 High
- jd cloud jdcosJD Cloud JDCOS Service jdcap set_iptv_info command injection5.3 Medium
- tiandy easy7 integrated management platformTiandy Easy7 Integrated Management Platform updateDbBackupInfo os command injection6.9 Medium
- wavlink wl-wn570ha1, wl-wn570ha1 firmware +1 moreWavlink WL-WN570HA1 adm.cgi ping_ddns command injection5.3 Medium
- wavlink wl-wn570ha1, wl-wn570ha1 firmware +1 moreWavlink WL-WN570HA1 adm.cgi set_sys_cmd command injection5.3 Medium
- wavlink wl-wn570ha1, wl-wn570ha1 firmware +1 moreWavlink WL-WN570HA1 adm.cgi set_sys_adm command injection5.3 Medium
- langflow-ai langflowlangflow-ai langflow Full Builtins code_parser.py CodeParser.parse_callable_details command injection5.3 Medium
- edimax br-6428ncEdimax BR-6428nC Web setWAN command injection5.3 Medium
- edimax br-6208acEdimax BR-6208AC L2TP Mode setWAN command injection5.3 Medium
- r-huijts mcp-server-rijksmuseumr-huijts mcp-server-rijksmuseum MCP index.ts open_image_in_browser os command injection5.3 Medium
- pskill9 website-downloaderpskill9 website-downloader MCP index.ts download_website os command injection5.3 Medium
- kleneway awesome-cursor-mpc-serverkleneway awesome-cursor-mpc-server Ccode-Review Tool codeReview.ts runCodeReviewTool command injection5.3 Medium
- crazyrabbitltc mcp-code-review-servercrazyrabbitLTC mcp-code-review-server RepoMix repomix.ts executeRepomix command injection5.3 Medium
- trendnet tew-821dap, tew-821dap firmware +1 moreTRENDnet TEW-821DAP Firmware Udpate diagnostic tools_diagnostic os command injection5.3 Medium
- trendnet tew-821dap, tew-821dap firmware +1 moreTRENDnet TEW-821DAP tools_diagnostic os command injection5.1 Medium
- artmin96 yii2-mcp-serverArtMin96 yii2-mcp-server MCP index.ts yii_execute_command os command injection5.3 Medium
- sunwood-ai-labs command-executor-mcp-serverSunwood-ai-labs command-executor-mcp-server MCP index.ts execute_command os command injection6.9 Medium
- eyal-gor p 69 branch monkey mcpeyal-gor p_69_branch_monkey_mcp Preview Endpoint advanced.py os command injection6.9 Medium
- totolink nr1800xTotolink NR1800X cstecgi.cgi sub_41A68C command injection8.7 High
- totolink a8000ruTotolink A8000RU CGI cstecgi.cgi vulnerability os command injection9.3 Critical
- No product listedA Command Injection vulnerability in the web management interface in Aver PTC320UV2 0.1.0000.65...6.5 Medium
- pallets click click, red hat ansible automation platform 2, ansible automation platform 2.5 for rhel 8 +3 more +5 more[DISPUTED] Pallets Click contains a command injection via Unsanitized Filename "click.edit()"7.2 High
- tenda 4g300, 4g300 firmware +1 moreTenda 4G300 DelFil sub_425A28 command injection5.3 Medium
- vetcoders mcp-server-semgrepVetCoders mcp-server-semgrep MCP index.ts create_rule os command injection6.9 Medium
- burtthecoder mcp-dnstwistBurtTheCoder mcp-dnstwist MCP index.ts fuzz_domain os command injection6.9 Medium
- polarvista xcode-mcp-serverPolarVista xcode-mcp-server MCP index.ts run_tests os command injection6.9 Medium
- arc53 docsgptUnauthenticated RCE in DocsGPT MCP STDIO Configuration10.0 Critical
- No product listedTOTOLINK N200RE V5 was discovered to contain a command injection vulnerability via the macstr and...9.8 Critical
- eiliyaabedini aider-mcpeiliyaabedini aider-mcp code_with_ai aider_mcp.py command injection6.9 Medium
- totolink a8000ruTotolink A8000RU CGI cstecgi.cgi setWiFiEasyGuestCfg os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU CGI cstecgi.cgi setRadvdCfg os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU CGI cstecgi.cgi setOpenVpnClientCfg os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU CGI cstecgi.cgi setWiFiBasicCfg os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU CGI cstecgi.cgi setVpnAccountCfg os command injection9.3 Critical
- jackwrichards fastlymcpjackwrichards FastlyMCP fastly_cli Tool fastly-mcp.mjs os command injection6.9 Medium
- egtai gmx-vmd-mcpegtai gmx-vmd-mcp VMD Launch mcp_server.py launch_vmd_gui_tool command injection6.9 Medium
- dvladimirov mcpdvladimirov MCP Git Search API mcp_server.py GitSearchRequest command injection6.9 Medium
- totolink a8000ruTotolink A8000RU CGI cstecgi.cgi setPptpServerCfg os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU CGI cstecgi.cgi setUrlFilterRules os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU CGI cstecgi.cgi setWiFiWpsStart os command injection9.3 Critical
- tenda hg3, hg3 firmware +1 moreTenda HG3 formTracert command injection8.7 High
- disler aider-mcp-serverdisler aider-mcp-server aider_ai_code server.py command injection6.9 Medium
- totolink a8000ruTotolink A8000RU CGI cstecgi.cgi CsteSystem os command injection9.3 Critical
- Show moreLoading…