"MAD Bugs: Even "cat readme.txt" is not safe":

https://blog.calif.io/p/mad-bugs-even-cat-readmetxt-is-not