Pyjail

A Python jail that forgot to block file descriptors; reopen stdout and shell out.

A calculator Discord bot ran user input through eval behind a substring blacklist, which fell to string splitting and hex escapes.