Collection

Tag: remote-code-execution

Log4Shell: The Logging Feature That Became Remote Code Execution Everywhere

Log4Shell turned attacker-controlled log strings into JNDI lookups and remote code execution, exposing how deeply hidden open-source dependencies can shape global risk.

↗

Shellshock: The Bash Parsing Bug That Hid in Plain Sight for Decades

Shellshock turned Bash's decades-old exported-function mechanism into remote code execution when attacker-controlled environment variables crossed into shell parsing.

↗