RE: https://discuss.systems/@ricci/117483936108340476
A good explanation of why there was the announcement of when the update would be released… with #AI LLMs, the time between update release and exploit against unpatched systems gets smaller and smaller…
@danyork
I've seen this post going around, which makes the case that LLMs are not actually that good at exploiting this vulnerability, but are good at making it *look like* they have exploited this vulnerability: https://eliastaylor.com/noexploit/
It seems very plausible, though I don't know the author and haven't checked into the repos they pointed at myself, so I can't vouch for its correctness.
There isn't an easy exploit for this PHP vulnerability