XWork bypasses security restrictions to execute arbitrary command vulnerability patches