#bash

Shellshock: The Bash Bug Hiding in an Environment Variable

For years, Bash would run code smuggled into the end of an environment variable. Shellshock (CVE-2014-6271) turned that into remote code execution across a huge slice of the internet.