Browse / Code Execution

Code Execution

See it on the mapBypass libraryPayloads

Weaknesses in this class

• Code Injection430
• Command Injection - Generic234
• OS Command Injection68
• Deserialization of Untrusted Data54
• Remote File Inclusion18
• Unrestricted Upload of File with Dangerous Type13
• Malware4
• Exposed Dangerous Method or Function3
• Use of Inherently Dangerous Function3
• Inclusion of Functionality from Untrusted Control Sphere3
• Download of Code Without Integrity Check1

Often found together with

• Memory Corruption156
• Cross-site Scripting86
• Access Control70
• Path Traversal66
• Information Disclosure50
• Injection and Smuggling47
• Misconfiguration40
• Server-Side Request Forgery38
• Denial of Service35
• SQL Injection34

Most upvoted Code Execution reports

AllValidInformativeN/ADuplicate

1. Content injection via URL parameter.DuplicateCode Injection · GSA Bounty
   9 votes
2. Command Execution because of extension handlingDuplicateCommand Injection - Generic · high · Brave Software
   8 votes
3. Remote Command Execution on a DoD websiteDuplicateCode Injection · U.S. Dept Of Defense
   7 votes
4. Remote Code Execution (RCE) in a DoD websiteDuplicateCode Injection · U.S. Dept Of Defense
   3 votes
5. Text manipulation in https://checkout.rbk.moneyDuplicateCode Injection · RBKmoney
   2 votes