Adding shell injection, promiscuous file permissions, and wildcard injection