Command Injection
Command injection is a security flaw that occurs when an application allows untrusted user input to be included in system commands. Attackers exploit this vulnerability to execute unauthorized commands on the underlying operating system. This can cause unauthorized access, data exfiltration, Denial of service, Malware injection,…
Example
Shellshock was a series of security vulnerabilities discovered in the Bash shell, a widely used command-line interface in Unix-based operating systems. The vulnerability allowed attackers to execute arbitrary commands by injecting malicious code into environment variables. This had widespread implications, as many web servers, CGI scripts, and other systems were affected.
Links
Cards
Data-validation-&-encoding
- Data-validation-&-encoding 3
- Data-validation-&-encoding 4
- Data-validation-&-encoding 7
- Data-validation-&-encoding 9
- Data-validation-&-encoding J
- Data-validation-&-encoding Q
- Data-validation-&-encoding K
