Abusing getenv() with repeated ROT13
Bypassing Path Checks by editing /proc/self/mem
Classic Buffer Overflow
One Byte to Rule Them All