2 ms·

Those are only web vulnerabilities ("non-web vulnerabilities require complex environments"), and they used specific "agents" that they primed with the specific

by remram 2y ago

Those are only web vulnerabilities ("non-web vulnerabilities require complex environments"), and they used specific "agents" that they primed with the specific exploitation tools they'd need, "5-6 documents" about that tool and vulnerabilities, and a specific prompt. As far as I can see, they don't disclose any of those. They also didn't pre-register the study in any way. Honestly this paper is missing almost all of the write-up.

remram 2y ago
Looking at the software they exploited... The first one looks like a student project? https://www.sourcecodester.com/php/17115/travel-journal-using-php-and-mysql-source-code.html https://www.sourcecodester.com/php/17115/travel-journal-usin... I see 79 lines of PHP code. It has two buttons, "read journal" and "write journal", to make a plain-text post. How did this get a CVE assigned? The next two are from a CMS with a README in Lithuanian, 2 stars, and a dead website. I don't want to dunk on all those projects, and maybe those kinds of programs are the bulk of CVEs, but they managed to find projects that did absolutely no validation and which can get a XSS/CSRF/SQLi on the first attempt (just put some JS or SQL into any form field and you've won). Is that really a random selection of 14 CVEs? Also why does the table have 14 when the text claims 15?