Trustico's website was vulnerable to a trivial shell command substitution injection, running as uid=0

https://arstechnica.com/information-technology/2018/03/trustico-website-goes-dark-after-someone-drops-critical-flaw-on-twitter/

!infosec !security