CWE-78: Shell injection
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command before it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in an OS Command, Shell metacharacters, OS Command Injection.
A kind of CWE-77 Command injection.
From the CWE List. © The MITRE Corporation.
Newest
- buffalo inc. wi-fi router products, buffalo fs-m1266 firmware, fs-s1266 firmware +44 more +46 moreOS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability...8.6 High
- matterai axon codeThe command auto-approval module in Axon Code contains an OS Command Injection vulnerability,...9.8 Critical
- coderider-kilo coderiderThe command auto-approval module in CodeRider-Kilo contains an OS Command Injection vulnerability...10.0 Critical
- ruckus networks unleashed, c110, e510 +27 more +29 moreRuckus Unleashed Authenticated RCE in Gateway Mode7.7 High
- themactep thingino-firmware, thingino firmware +1 morethingino-firmware api.cgi Unauthenticated Command Injection in Captive Portal8.7 High
- librenmsLibreNMS is Vulnerable to Remote Code Execution by Arbitrary File Write8.5 High
- hackerbay oneuptimeOneUptime has sandbox escape in Synthetic Monitor Playwright runtime allows project members to execute arbitrary commands on Probe10.0 Critical
- theforeman foreman, red hat satellite 6, satellite 6.16 for rhel 8 +4 more +6 moreForman: foreman: remote code execution via command injection in websocket proxy8.0 High
- netcore power 15axNetcore Power 15AX Diagnostic Tool netis.cgi setTools os command injection8.7 High
- asus firmware, router +1 moreA Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Web management...8.6 High
- openhandsOpenHands is Vulnerable to Command Injection through its Git Diff Handler7.6 High
- modoboaModoboa has an OS Command Injection7.2 High
- mmahrous thumblerthumbler allows OS Command Injection9.8 Critical
- zapolnoch tesseract ocrnode-tesseract-ocr is vulnerable to OS Command Injection through unsanitized recognize() function parameter9.8 Critical
- dbashford textracttextract is vulnerable to OS Command Injection9.8 Critical
- pdf-image project pdf-imagepdf-image has an OS Command Injection Vulnerability through its pdfFilePath parameter9.8 Critical
- pinchtabPinchTab: OS Command Injection via Profile Name in Windows Cleanup Routine Enables Arbitrary Command Execution6.7 Medium
- zabbixHost and event action script regex validation can be bypassed in certain situations, leading to potential command injection7.7 High
- silabs.com simplicity installer tool (silicon labs tool - slt) for simplicity studio v6, simplicity studio v5 +1 moreCommand Execution vulnerability in Simplicity Installer2.1 Low
- sbtsbt: Source dependency feature (via crafted VCS URL) leads to arbitrary code execution on Windows6.7 Medium
- langflowLangflow GitHub Actions Shell Injection9.1 Critical
- d-link dir-825, dir-825r +1 moreD-Link DIR-825/DIR-825R NTP Service libdeuteron_modules.so handler_update_system_time os command injection8.6 High
- totolink x6000r, x6000r firmware +1 moreTOTOLINK X6000R shttpd setLanCfg privilege escalation8.6 High
- blinkoBlinko: Admin RCE - MCP Server Command Injection8.6 High
- cern indicoIndico discloses local files resulting in Remote Code Execution through LaTeX injection7.7 High
- wwbn avideoAVideo Vulnerable to OS Command Injection via Unsanitized `users_id` and `liveTransmitionHistory_id` in Restreamer Log File Path8.8 High
- tp-link archer nx200 firmware, archer nx210 firmware, archer nx500 firmware +12 more +14 moreCommand Injection in Modem Management CLI on TP-Link Archer NX200, NX210, NX500 and NX6008.5 High
- tp-link archer nx200 firmware, archer nx210 firmware, archer nx500 firmware +12 more +14 moreCommand Injection in Wireless Control CLI on TP-Link Archer NX200, NX210, NX500 and NX6008.5 High
- vim, red hat ai inference server 3.2, ai inference server 3.3 +28 more +30 moreVim affected by Command injection via newline in glob()5.6 Medium
- kalcaddle kodboxkalcaddle kodbox fileThumb Endpoint app.php checkBin os command injection5.1 Medium
- helmholz myrex24v2, myrex24v2.virtual, mb connect line mbconnect24 +1 more +3 moreUnauthenticated RCE in com_mb24sysapi9.8 Critical
- tiandy easy7 integrated management platformTiandy Easy7 Integrated Management Platform Configuration ImportSystemConfiguration.jsp os command injection9.3 Critical
- linksys mr9600, mr9600 firmware +1 moreLinksys MR9600 SmartConnect.lua smartConnectConfigure os command injection8.7 High
- tenda f453, f453 firmware +1 moreTenda F453 WriteFacMac FormWriteFacMac privilege escalation5.3 Medium
SHAdd0WTAka/Zen-Ai-PentestGitHub ActionsZen-AI-Pentest has Shell Injection via untrusted issue title in ZenClaw Discord Integration workflow10.0 Critical- wwbn avideoAVideo has an OS Command Injection via $() Shell Substitution Bypass in sanitizeFFmpegCommand()8.1 High
- wwbn avideoAVideo Multi-Chain Attack: Unauthenticated Remote Code Execution via Clone Key Disclosure, Database Dump, and Command Injection10.0 Critical
- d-link dir-820lw, dlink dir-820lw firmware +1 moreD-Link DIR-820LW SSDP ssdpcgi_main os command injection6.9 Medium
- totolink wa300, wa300 firmware +1 moreTotolink WA300 cstecgi.cgi recvUpgradeNewFw os command injection6.9 Medium
- sigmade git-mcp-serversigmade Git-MCP-Server gitUtils.ts child_process.exec os command injection4.8 Medium
- qnap qunetswitchQuNetSwitch8.1 High
- qnap qunetswitchQuNetSwitch6.3 Medium
- qnap qunetswitchQuNetSwitch5.7 Medium
- dataease sqlbotSQLBot: RCE via SQL Injection in Excel Upload Endpoint8.6 High
- d-link dir-513, dlink dir-513 firmware +1 moreD-Link DIR-513 formSysCmd os command injection5.3 Medium
- awstats, debian linux +1 moreAWStats 8.0 is vulnerable to Command Injection via the open function7.8 High
- microsoft bing imagesMicrosoft Bing Images Remote Code Execution Vulnerability9.8 Critical
- open-emr openemrOpenEMR has Remote Code Execution in backup functionality9.1 Critical
- intakeIntake has a Command Injection via shell() Expansion in Parameter Defaults8.8 High
- wwbn avideoAVideo Vulnerable to OS Command Injection via Unescaped URL in LinkedIn Video Upload Shell Command5.9 Medium
- Show moreLoading…