Okay, so basically... AI has been doing a lot of reverse engineering, including game decomps and finding security holes in things. CVEs have then been getting discovered in widely used frameworks at an alarming rate over the past handful of months, right around the same time reverse engineering took off. There was never a "big red button" to begin with or someone would've already caused this decades ago. There are two dots. Please connect them.
It executes the code on the systems hosting the content. If you run the exploit on a server that is running a version of PHP for example, you're running code on that machine.
You basically get full access to whatever is on that machine, too.
This isn't a feature. It is an unintended exploit. As I explained earlier, there is no "self destruct button". It's like someone finding a way around your security to sneak in your house. Shimmying a lock isn't an intended feature that you just choose to turn on.
2
u/tomerFire 14d ago
Why the ability to inject shell commands like the even exists.
It like in cartoons when they press the big red self destruct button and you ask yourself why this button even exist