地图 / 操作系统命令注入操作系统命令注入
OS Command Injection · 代码执行
代码执行 / 操作系统命令注入
68公开报告
—CWE 编号
0已标注发现方式
68关联报告
发现方式分布
暂无发现方式标注。
关联报告
Potential pre-auth RCE on Twitter VPNX / xAI · 2019-08-10 · 高危 · $20,160 · 1,246 票Exposed Kubernetes API - RCE/Exposed CredsSnapchat · 2021-07-29 · 高危 · $25,000 · 1,191 票Webshell via File Upload on ecjobs.starbucks.com.cnStarbucks · 2019-11-13 · 高危 · 688 票🐞 OS Command Injection at https://sea-web.gold.razer.com/lab/ws-lookup via IP parameterRazer · — · 未评级 · $2,000 · 676 票RCE via github importGitLab · 2022-11-16 · 高危 · 271 票RCE using bash command injection on /system/images (toimitilat.lahitapiola.fi)LocalTapiola · — · 未评级 · 209 票Remote Code Execution via Extract App PluginNextcloud · 2019-05-30 · 中危 · 124 票Possible RCE through Windows Custom Protocol on Windows clientNord Security · — · 未评级 · 120 票OS Command Injection in `aws-cdk-lib` NodejsFunction via Unsanitized `OsCommand` Helper (Supply Chain RCE)AWS VDP · 2026-07-06 · 中危 · 111 票Remote Code Execution in ██████U.S. Dept Of Defense · 2020-05-11 · 高危 · 94 票GitLab-Runner on Windows `DOCKER_AUTH_CONFIG` container host Command InjectionGitLab · 2020-11-04 · 中危 · 77 票[forum.acronis.com] JNDI Code Injection due an outdated log4j componentAcronis · 2024-08-28 · 高危 · 74 票CVE-2020-7961 RCE Liferay Portal Unauthenticated via https://████████/U.S. Dept Of Defense · 2024-10-25 · 高危 · 62 票OS Command Injection via egrep in Rake::FileListRuby · 2019-08-29 · 未评级 · 62 票Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Trellix · 2025-01-12 · 高危 · 60 票Shell command injection in https://partner.steamgames.com/admin/game/publish/ via screenshot URLValve · 2024-07-30 · 高危 · 59 票Store Development Resource Center was vulnerable to a Remote Code Execution - Unauthenticated Remote Command Injection (CVE-2019-0604)Starbucks · 2019-12-12 · 高危 · 57 票Remote Code Execution through DNN Cookie DeserializationU.S. Dept Of Defense · 2020-05-27 · 中危 · 56 票Jitsi Desktop Client RCE By Interacting with Malicious URL Schemes on Windows8x8 · 2023-02-10 · 中危 · $777 · 51 票RCE via WikiCloth markdown rendering if the `rubyluabridge` gem is installedGitLab · 2022-04-12 · 未评级 · $3,000 · 50 票Command Injection via Unsanitized Bundling Options in `aws-cdk-lib/aws-lambda-nodejs`AWS VDP · 2026-06-11 · 中危 · 48 票Shell command injection in https://partner.steamgames.com/bundles/savestore/ via overwriting asset_path_identifierValve · 2024-07-30 · 高危 · 47 票Reflected XSS and Blind out of band command injection at subdomain dstuid-ww.dst.ibm.comIBM · 2022-02-04 · 中危 · 42 票RCE in ███ [CVE-2021-26084]U.S. Dept Of Defense · 2023-12-21 · 高危 · 39 票RCE via ssh:// URIs in multiple VCSInternet Bug Bounty · 2017-09-21 · 中危 · 39 票Shell upload in http://widget.support.my.com/Mail.ru · — · 未评级 · $1,000 · 36 票Incomplete fix for CVE-2022-23915: Mercurial argument injection in HgRepository.get_file() leads to command executionWeblate · 2026-09-15 · 中危 · 34 票OS command injection on seedr.ruMail.ru · — · 未评级 · $1,000 · 34 票XSS leads to RCE on the RocketChat desktop client.Rocket.Chat · 2021-01-01 · 高危 · 31 票Pulse Secure File disclosure, clear text and potential RCEU.S. Dept Of Defense · 2019-12-02 · 高危 · 31 票Remote code injection in Log4j on https://mymtn.mtncongo.net - CVE-2021-44228MTN Group · 2024-08-24 · 高危 · 30 票Remote OS Command Execution on Oracle Weblogic server via [CVE-2017-10271]MTN Group · 2021-04-25 · 高危 · 29 票OS Command Injection in Nexus Repository Manager 2.xCentral Security Project · 2019-08-20 · 高危 · 28 票Blind User-Agent SQL Injection to Blind Remote OS Command Execution at █████████Sony · 2022-07-06 · 高危 · 26 票Remote OS Command Execution on Oracle Weblogic server via [CVE-2017-3506]MTN Group · 2021-04-25 · 高危 · 25 票Incomplete Input Sanitization in CodeInterpreter install_packages Allows Command Injection via pip FlagsAWS VDP · 2026-09-16 · 中危 · 23 票Jenkins Unauthenticated RCE on https://djangoci.com/Django · 2019-05-16 · 高危 · 22 票Arbitrary File Reading leads to RCE in the Pulse Secure SSL VPN on the https://███U.S. Dept Of Defense · 2019-12-02 · 高危 · 21 票Several vulnerabilities lead to Remote Code Execution and Arbitraty File Read on multiple servers50m-ctf · — · 未评级 · 21 票Default credentials for the temporary POC site alipoc.stg.starbucks.com.cn permitted WAF bypass and RCEStarbucks · 2020-06-16 · 低危 · 19 票RCE on ███████ [CVE-2021-26084]U.S. Dept Of Defense · 2023-12-21 · 高危 · 18 票Remote code injection in Log4j on http://mtn1app.mtncameroon.net - CVE-2021-44228MTN Group · 2024-08-24 · 高危 · 17 票Remote Command Execution in a internal server to get the flag fileh1-5411-CTF · 2018-10-22 · 高危 · 17 票Unauth RCE on Jenkins Instance at https://█████████/U.S. Dept Of Defense · 2021-03-24 · 高危 · 15 票GlobalProtect - OS Command Injection #█████████U.S. Dept Of Defense · 2026-01-12 · 高危 · 14 票OS Command Injection on Jison [all-parser-ports]Node.js third-party modules · 2020-05-28 · 低危 · 14 票CSV Injection with the CSV export featureChaturbate · 2018-09-20 · 低危 · 14 票Unescaped consent-prompt renderer (HTML()) enables concealed-approval OS command injection in strands-agents/tools use_computer — RCEAWS VDP · 2026-11-06 · 低危 · 13 票Node --run POSIX positional argument escaping allows shell command injectionNode.js · 2026-06-23 · 中危 · 13 票Insecure use of shell.openExternal() in Rocket.Chat Desktop App leading to RCERocket.Chat · 2022-08-01 · 高危 · 13 票Remote Code Execution - Unauthenticated Remote Command Injection (via Microsoft SharePoint CVE-2019-0604)U.S. Dept Of Defense · 2020-05-11 · 中危 · 13 票OS Command Injection in scripts/firefox-db2pem.sh via untrusted certificate nicknamescurl · 2025-06-28 · 中危 · 12 票gitlabhook OS Command InjectionNode.js third-party modules · 2019-09-13 · 高危 · 10 票OS Command Injection in 'rdoc' documentation generatorRuby · 2021-07-13 · 低危 · 7 票[titans.3clans.ru] phpBB 3.0.8 - Захват аккаунта администратора + удалённое выполнение кода.Mail.ru · — · 未评级 · $150 · 7 票CSV Injection with the CSV export featureWeblate · 2017-05-17 · 低危 · 7 票Authenticated RCE in ToughSwitchUbiquiti Inc. · 2018-06-19 · 中危 · 6 票[git-dummy-commit] Command injection on the msg parameterNode.js third-party modules · 2018-06-15 · 高危 · 5 票OS Command Injection (subprocess Module Usage)curl · 2025-07-07 · 低危 · 4 票Insecure use of shell.openExternal() leads to RCE in Rocket.Chat-DesktopRocket.Chat · 2022-12-08 · 中危 · 4 票DNS rebinding in --inspect via invalid octal IP addressNode.js · 2022-12-07 · 低危 · 4 票OS Command Injection in '/lib/un.rb -- Utilities to replace common UNIX commands in Makefiles etc'Ruby · 2021-07-19 · 低危 · 4 票Remote OS command Execution in the 3 more Oracle Weblogic on the ████████, ████, ███████ [CVE-2017-10352]U.S. Dept Of Defense · 2019-10-08 · 高危 · 4 票[buttle] Remote Command Execution via unsanitized PHP filename when it's run with --php-bin flagNode.js third-party modules · 2018-05-11 · 高危 · 4 票[indy_node]POOL_UPGRADE command injection, Trustee Node can execute command in any other Node`s system.Linux Foundation Decentralized Trust · 2023-04-27 · 低危 · 2 票OS Command Execution on User's PC via CSV InjectionX / xAI · 2017-11-02 · 低危 · 2 票Export vault feature is vulnerable to CSV injectionBitwarden · 2017-09-28 · 未评级 · 2 票[listening-processes] Command InjectionNode.js third-party modules · 2020-02-02 · 高危 · 0 票