How is find's {} substitution pattern vulnerable to injection attack?
61228
Is it possible to use `find -exec sh -c` safely?
49574
Pattern matching to a function evaluation inside an Association
133569
What does the double slash mean in `${f// /_}`?
85229
find -exec + vs find | xargs: which one to choose?
23188
Why does the find command blow up in /run/?
50029
Is it safe to use file's hash as IV?
74406
SQL injection that gets around mysql_real_escape_string()
151693
What does "{} \;" mean in the find command?
72153
How to implement injection in Ruby?
59863
How can I make the map::find operation case insensitive?
102137
What's the purpose of adding a prefix on both sides of a shell variable comparison to a string literal?
141091
How can sanitation that escapes single quotes be defeated by SQL injection in SQL Server?
89777
What are the security issues and race conditions in using `find -exec`?
38429
How can I use inverse or negative wildcards when pattern matching in a unix/linux shell?
20731
Can command substitution be nested in variable substitution?
70911
What does env x='() { :;}; command' bash do and why is it insecure?
26526
Why is AES resistant to known-plaintext attacks?