CWE-78: Shell injection
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command before it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in an OS Command, Shell metacharacters, OS Command Injection.
A kind of CWE-77 Command injection.
From the CWE List. © The MITRE Corporation.
Newest
- codewithcj sparkyfitnessSparkyFitness: Authenticated OS command injection (host RCE) via backup-restore filename in POST /api/admin/backup/restore7.2 High
- wheels cliWheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and...7.8 High
- No product listedZ.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers...7.8 High
- netgate pfsense ceNetgate pfSense CE 2.4.5 through 2.9.0 OS Command Injection via system_advanced_admin.php8.6 High
- netgate pfsense ce, pfsense +1 moreNetgate pfSense CE 2.5.0 through 2.9.0 OS Command Injection via openvpn.learn-address.sh2.3 Low
- netgate pfsense ceNetgate pfSense CE through 2.9.0 OS Command Injection via openvpn.connect_async.sh7.7 High
- netgate pfsense ce, pfsense +1 moreNetgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via Traffic Shaper Limiters8.6 High
- netgate pfsense ce, pfsense +1 moreNetgate pfSense CE through 2.9.0 OS Command Injection via CARP VHID8.6 High
- netgate pfsense ce, pfsense +1 moreNetgate pfSense CE through 2.9.0 OS Command Injection via Gateway Monitor IP8.6 High
- netgate pfsense ce, pfsense +1 moreNetgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent Interface8.6 High
- netgate pfsense ce, pfsense +1 moreNetgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via interfaces_qinq_edit.php8.6 High
- unitronics unistream pro/unilogicUnitronics - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')8.3 High
- opnsense coreOPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer9.9 Critical
- wavlink wl-wn530be2-aWavlink WL-WN530BE2-A Login Processing api.cgi sub_12580 os command injection10.0 Critical
- qnap systems inc. hybriddesk stationPre-Authentication Command Injection9.3 Critical
- qnap systems inc. notes station 3**RCE** Unsanitized `X-Forwarded-For` header passed to `shell_exec()` via broken IP validation fallback in `getClientIP()`6.9 Medium
- qnap systems inc. qumagieWebSocket timelapse path traversal and command injection8.6 High
- netgate pfsense-pkg-frrNetgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS...8.8 High
- gitpython-developers gitpythonGitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec9.2 Critical
- palo alto networks cortex xsiam os query, cortex xsoar os query +1 moreCortex XSOAR: OS Command Injection Vulnerability6.1 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Authenticated Admin Command Injection Vulnerability6.1 Medium
- sonicwall network security manager (nsm)Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS...7.2 High
- labredescefetrj wegiaWeGIA: Pre-auth Installer Injection Chain Enables Command Execution and Arbitrary PHP Code Injection6.5 Medium
- shd101wyy vscode-markdown-preview-enhancedMarkdown Preview Enhanced: One Click RCE via Markdown Link Command Injection on Windows8.8 High
- d-link dir-868lD-Link DIR-868L HNAP CGI cgibin system os command injection10.0 Critical
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: EX Series, SRX Series, QFX Series: A rogue DHCP server causes root-level command execution when the phone-home client processes specific information8.7 High
- juniper networks junos os evolvedJunos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabled9.3 Critical
- juniper networks junos osJunos OS: MX Series: Missing Authorization for specific 'request' CLI commands allows command injection8.5 High
- juniper networks junos os evolvedJunos OS Evolved: PTX Series: An attacker controlled DHCP response causes root-level compromise when zero-touch provisioning is used9.3 Critical
- juniper networks junos os evolvedJunos OS Evolved: PTX Series: An attacker controlled gRPC response causes root-level compromise when zero-touch provisioning is used8.7 High
- jdx misemise permits untrusted local configuration to override default shell arguments7.8 High
- anshulkharb thumbnailThumbnail through 1.5 OS Command Injection via generate_thumbnail File Paths9.3 Critical
- shahkashani stillsStills before 25.24.2 OS Command Injection via Media File Names9.3 Critical
- adamarcanov compress-fonts@offactory/compress-fonts before 1.1.1 OS Command Injection via Font File Names8.5 High
- jinghaihan turnpressTurnpress through 0.4.2 OS Command Injection via Crafted .docx File Names8.5 High
- beganovich snappdfBeganovich snappdf 1.1.0 before 6.1.0 OS Command Injection on Windows via setUrl()9.2 Critical
- arsalandotme video-stitchVideo-stitch before 2.0.0-beta.1 OS Command Injection via concat() and cut()9.3 Critical
- chetanxpro nodejs-whispernodejs-whisper through 0.3.1 OS Command Injection via convertToWavType9.3 Critical
- kky-ykk transcribe2textstranscribe2texts through 1.0.6 OS Command Injection via transcribeAudio audioPath9.3 Critical
- xhtml2pdfxhtml2pdf before 0.2.19 OS Command Injection via startViewer File Name8.5 High
- runnerty @runnerty/executor-decompress@runnerty/executor-decompress through 3.1.1 OS Command Injection via Archive File Name8.7 High
- ariym whisper-nodeWhisper-node through 1.1.1 OS Command Injection via filePath and language9.3 Critical
- mborne @mborne/extract@mborne/extract before 0.2.1 OS Command Injection via archivePath and targetDir9.3 Critical
- zepspaiva doc-recogdoc-recog through 1.1.6 OS Command Injection via DocData._readPDF File Path9.3 Critical
- wastemobile buildebooksbuildebooks before 0.2.2 OS Command Injection via kindlegen EPUB File Name8.5 High
- revolunet pypdftkpypdftk through 0.5 OS Command Injection via PDF and Output Paths9.3 Critical
- scionoftech webp-converterwebp-converter before 3.0.0 OS Command Injection via File Names and Options9.3 Critical
- danday74 git-diffgit-diff before 2.0.7 OS Command Injection via gitDiff Input Strings9.3 Critical
- vworld4u office-converteroffice-converter through 1.0.2 OS Command Injection via fileName in generatePdf9.3 Critical
- dell unisphere for powermax vappDell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of...6.6 Medium
- Show moreLoading…