Browse / Code Execution

Code Execution

See it on the mapBypass libraryPayloads

Weaknesses in this class

• Code Injection430
• Command Injection - Generic234
• OS Command Injection68
• Deserialization of Untrusted Data54
• Remote File Inclusion18
• Unrestricted Upload of File with Dangerous Type13
• Malware4
• Exposed Dangerous Method or Function3
• Use of Inherently Dangerous Function3
• Inclusion of Functionality from Untrusted Control Sphere3
• Download of Code Without Integrity Check1

Often found together with

• Memory Corruption156
• Cross-site Scripting86
• Access Control70
• Path Traversal66
• Information Disclosure50
• Injection and Smuggling47
• Misconfiguration40
• Server-Side Request Forgery38
• Denial of Service35
• SQL Injection34

Most upvoted Code Execution reports

AllValidInformativeN/ADuplicate

1. Potential pre-auth RCE on Twitter VPNOS Command Injection · critical · X / xAI
   $20,1601,246 votes
2. Exposed Kubernetes API - RCE/Exposed CredsOS Command Injection · critical · Snapchat
   $25,0001,191 votes
3. RCE via npm misconfig -- installing internal libraries from the public registryCode Injection · critical · PayPal
   $30,000946 votes
4. H1514 Remote Code Execution on kitcrm using bulk customer update of Priority ProductsCommand Injection - Generic · medium · Shopify
   830 votes
5. Remote Code Execution on www.semrush.com/my_reports on Logo uploadCommand Injection - Generic · critical · Semrush
   824 votes
6. Websites Can Run Arbitrary Code on Machines Running the 'PlayStation Now' ApplicationCode Injection · critical · PlayStation
   $15,000780 votes
7. Git flag injection - local file overwrite to remote code executionCommand Injection - Generic · critical · GitLab
   $12,000777 votes
8. Webshell via File Upload on ecjobs.starbucks.com.cnOS Command Injection · critical · Starbucks
   688 votes
9. 🐞 OS Command Injection at https://sea-web.gold.razer.com/lab/ws-lookup via IP parameterOS Command Injection · Razer
   $2,000676 votes
10. [phpobject in cookie] Remote shell/command executionCode Injection · Pornhub
    $20,000607 votes
11. RCE and Complete Server Takeover of http://www.█████.starbucks.com.sg/Code Injection · critical · Starbucks
    572 votes
12. Privilege Escalation From user to SYSTEM via unauthenticated command execution Command Injection - Generic · critical · Ubiquiti Inc.
    553 votes
13. BAD Code ! N/ACommand Injection - Generic · Paragon Initiative Enterprises
    549 votes
14. Local files could be overwritten in GitLab, leading to remote command executionCommand Injection - Generic · critical · GitLab
    $12,000542 votes
15. Remote Code Execution in Slack desktop apps + bonusCode Injection · critical · Slack
    509 votes
16. RCE when removing metadata with ExifToolCode Injection · critical · GitLab
    $20,000508 votes
17. SQL injection on contactws.contact-sys.com in TScenObject action ScenObjects leads to remote code executionCode Injection · QIWI
    475 votes
18. RCE via unsafe inline Kramdown options when rendering certain Wiki pagesCode Injection · critical · GitLab
    $20,000427 votes
19. Panorama UI XSS leads to Remote Code Execution via Kick/Disconnect MessageCode Injection · critical · Valve
    420 votes
20. Remote code execution on Basecamp.comCommand Injection - Generic · critical · Basecamp
    $5,000417 votes
21. H1514 Server Side Template Injection in Return Magic email templates?Code Injection · Shopify
    409 votes
22. Unrestricted file upload on [ambassador.mail.ru] Code Injection · Mail.ru
    $3,000404 votes
23. Remote Command Execution via Github importCommand Injection - Generic · critical · GitLab
    $33,510392 votes
24. RCE via the DecompressedArchiveSizeValidator and Project BulkImports (behind feature flag)Command Injection - Generic · critical · GitLab
    $33,510387 votes
25. [CVE-2022-44268] Arbitrary Remote Leak via ImageMagickRemote File Inclusion · critical · HackerOne
    371 votes
26. RCE on build server via misconfigured pip installDownload of Code Without Integrity Check · critical · Yelp
    366 votes
27. Unauthenticated RCE in Taskcluster web-server via GraphQL filter argument (sift $where)Code Injection · critical · Mozilla
    $12,000361 votes
28. RCE on shared.mail.ru due to "widget" pluginCode Injection · Mail.ru
    $10,000359 votes
29. SSRF & LFR via on city-mobil.ruRemote File Inclusion · Mail.ru
    343 votes
30. Arbitrary file read via ffmpeg HLS parser at https://www.flickr.com/photos/uploadCode Injection · critical · Flickr
    340 votes
31. RCE via npm misconfig -- installing internal libraries from the public registryCode Injection · critical · Uber
    $9,000325 votes
32. Code injection possible with malformed Nextcloud Talk chat commandsCode Injection · high · Nextcloud
    317 votes
33. RCE on TikTok Ads PortalCode Injection · critical · TikTok
    312 votes
34. Arbitrary Code Execution via npm misconfiguration – installing internal libraries from the public registryCode Injection · critical · LY Corporation
    $11,500288 votes
35. RCE via github importOS Command Injection · critical · GitLab
    271 votes
36. Deserialization of untrusted data at https://www.redtube.com/media/hls?s=dataDeserialization of Untrusted Data · Pornhub
    $10,000271 votes
37. Unrestricted file upload leads to Stored XSSUnrestricted Upload of File with Dangerous Type · Visma Public
    $250268 votes
38. Attacker can add arbitrary data to the blockchain without paying gasDeserialization of Untrusted Data · critical · Rootstock Labs
    258 votes
39. SQL Injection in www.hyperpure.comCode Injection · critical · Eternal
    $2,000229 votes
40. RCE by command line argument injection to `gm convert` in `/edit/process?a=crop`Command Injection - Generic · critical · Imgur
    229 votes
41. Unauthenticated SSRF in jira.tochka.com leading to RCE in confluence.bank24.intCode Injection · QIWI
    221 votes
42. Publicly exposed SVN repository, ht.pornhub.comCode Injection · Pornhub
    $10,000211 votes
43. Test-scripts for postgis in mason-repository using unsafe unzip of content from unclaimed bucket creates potential RCE-issuesCommand Injection - Generic · critical · Mapbox
    209 votes
44. RCE using bash command injection on /system/images (toimitilat.lahitapiola.fi)OS Command Injection · LocalTapiola
    209 votes
45. Keybase client (Windows 10): Write files anywhere in userland using relative path in "download attachement" featureRemote File Inclusion · Keybase
    $5,000196 votes
46. Remote Code Execution on contactws.contact-sys.com via SQL injection in TCertObject operation "Delete"Code Injection · QIWI
    194 votes
47. Remote Command execution due to image tragickCode Injection · ██████
    184 votes
48. Authenticated Elasticsearch Painless script execution via Query.search.sort_query on hackerone.com/graphqlCode Injection · high · HackerOne
    $7,000174 votes
49. RCE of Burp Scanner / Crawler via Clickjacking Command Injection - Generic · high · PortSwigger Web Security
    $3,000172 votes
50. CVE-2020-8913 - Persistent arbitrary code execution in Android's Google Play Core Library: details, explanation and the PoCCode Injection · Google
    171 votes
51. Git flag injection leading to file overwrite and potential remote code executionCommand Injection - Generic · critical · GitLab
    $3,500169 votes
52. JMX RMI command injection on 195.211.131.82(Mail.ru Gaming)Command Injection - Generic · Mail.ru
    $2,000163 votes
53. Open memory dump method leaking customer information ,secret keys , password , source code & admin accountsExposed Dangerous Method or Function · critical · Stripo Inc
    158 votes
54. Path traversal, SSTI and RCE on a MailRu acquisition Code Injection · Mail.ru
    $2,000152 votes
55. $50 million CTF WriteupCommand Injection - Generic · 50m-ctf
    152 votes
56. MobileIron Unauthenticated RCE on mdm.qiwi.com with WAF bypassDeserialization of Untrusted Data · QIWI
    148 votes
57. Path traversal, to RCECommand Injection - Generic · high · GitLab
    $12,000142 votes
58. Payload delivery via Social Media urls on H1 profileRemote File Inclusion · medium · HackerOne
    138 votes
59. PHP code injection at tz.mail.ruCode Injection · Mail.ru
    $3,000137 votes
60. uber.com may RCE by Flask Jinja2 Template InjectionCode Injection · Uber
    $10,000137 votes
61. Account takeover via insecure intent handling Deserialization of Untrusted Data · medium · Basecamp
    136 votes
62. Send arbitrary PUT requests when user clicks on a linkCommand Injection - Generic · medium · GitLab
    135 votes
63. Apache Flink RCE via GET jar/plan API EndpointCommand Injection - Generic · critical · Aiven Ltd
    $6,000134 votes
64. Admin Panel Accessed (OAuth Bypassed ) Command Injection - Generic · critical · Mapbox
    $4,000133 votes
65. Git flag injection - Search API with scope 'blobs' Command Injection - Generic · high · GitLab
    $7,000130 votes
66. Remote Code Execution via Extract App PluginOS Command Injection · high · Nextcloud
    124 votes
67. Urgent: Server side template injection via Smarty template allows for RCECode Injection · Unikrn
    122 votes
68. Possible RCE through Windows Custom Protocol on Windows clientOS Command Injection · Nord Security
    120 votes
69. SQL Injection + Insecure Deserialization leads to Remote Code Execution on https://krisp.aiDeserialization of Untrusted Data · critical · Krisp
    119 votes
70. Unserialize leading to arbitrary PHP function invokeCode Injection · critical · Rockstar Games
    119 votes
71. Remote Code Execution on Git.imgur-dev.com Code Injection · critical · Imgur
    119 votes
72. Unrestricted File Upload on https://partner.tiktokshop.com/wsos_v2/oec_partner/uploadUnrestricted Upload of File with Dangerous Type · medium · TikTok
    118 votes
73. SQL injection on contactws.contact-sys.com in TRateObject.AddForOffice in USER_ID parameter leads to remote code executionCode Injection · QIWI
    118 votes
74. Public instance of Jenkins on https://██████████/ with /script enabledCode Injection · critical · U.S. Dept Of Defense
    118 votes
75. Remote Code Execution and AWS IAM Credentials Exfiltration in https://████████/Command Injection - Generic · critical · U.S. Dept Of Defense
    114 votes
76. Remote Code Execution (Reverse Shell) - File ManagerCode Injection · medium · Concrete CMS
    114 votes
77. OS Command Injection in `aws-cdk-lib` NodejsFunction via Unsanitized `OsCommand` Helper (Supply Chain RCE)OS Command Injection · high · AWS VDP
    111 votes
78. Team members can trigger arbitrary code execution in Slack Desktop Apps via HTML NotificationsCode Injection · high · Slack
    107 votes
79. [hta3] Remote Code Execution on ████Code Injection · critical · U.S. Dept Of Defense
    104 votes
80. Insecure Bundler configuration fetching internal Gems (okra) from Rubygems.orgCommand Injection - Generic · high · Basecamp
    $5,000102 votes
81. Tricking the "Create snippet" feature into displaying the wrong filetype can lead to RCE on Slack usersUnrestricted Upload of File with Dangerous Type · high · Slack
    $1,500101 votes
82. Remote Unrestricted file Creation/Deletion and Possible RCE.Code Injection · low · X / xAI
    100 votes
83. No SearchEngine sanatizing can lead to command injectionCommand Injection - Generic · medium · Notepad++
    99 votes
84. Malformed save files (.sav) allow to write files with arbitrary extensions and content in GoldSrc-based games.Malware · high · Valve
    $1,50099 votes
85. [insideok.ru] Remote Command Execution via file upload.Command Injection - Generic · critical · ok.ru
    98 votes
86. User-assisted RCE in Slack for macOS (from official site) due to improper quarantine meta-attribute handling for downloaded filesCode Injection · high · Slack
    97 votes
87. LOGJ4 VUlnerability [HtUS]Command Injection - Generic · critical · U.S. Dept Of Defense
    $1,00094 votes
88. Remote Code Execution in ██████OS Command Injection · critical · U.S. Dept Of Defense
    94 votes
89. Unsafe deserialization leads to token leakage in PayPal & PayPal for Business [Android]Deserialization of Untrusted Data · medium · PayPal
    93 votes
90. Injection in path parameter of Ingress-nginxCode Injection · high · Kubernetes
    91 votes
91. CVE-2024-27281: RCE vulnerability with .rdoc_options in RDocCode Injection · high · Internet Bug Bounty
    $4,86088 votes
92. Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via RCE in ghe-update-checkCommand Injection - Generic · high · GitHub
    88 votes
93. Remote code execution [CVE-2023-36845]Code Injection · critical · MTN Group
    87 votes
94. Burp Suite extensions can execute arbitrary codeInformativeCode Injection · high · PortSwigger Web Security
    85 votes
95. [app-01.youdrive.club] RCE in CI/CD via dependency confusionCommand Injection - Generic · Mail.ru
    84 votes
96. Remote Code Execution on contactws.contact-sys.com via SQL injection in TAktifBankObject.GetOrder in parameter DOC_IDCode Injection · QIWI
    84 votes
97. Authenticated Code Execution through Phar deserialization in CSV Importer as Shop manager in WooCommerceDeserialization of Untrusted Data · high · Automattic
    84 votes
98. Remote Code Execution (RCE) in a DoD websiteCode Injection · critical · U.S. Dept Of Defense
    84 votes
99. RCE on Wordpress websiteDeserialization of Untrusted Data · critical · Nextcloud
    83 votes
100. OneLogin authentication bypass on WordPress sites via XMLRPCCode Injection · Uber
     $7,00083 votes