Attackers can deliver crafted requests or data to the vulnerable software, which executes the destructive code as though it had been its individual. This exploitation process bypasses security actions and