This is a deeply uninteresting example for anyone clueful. It’s an authenticated RCE in redis, anyone even vaguely familiar with the codebase knows to not expect there to be any real security boundary in place here.

Don’t confuse this with an unauthenticated RCE, that would actually matter. Absolutely anyone can shit out endless bugs like this with AFL, this is an extremely messy unhardened surface that expects trusted inputs.

▲

levkk 3 hours ago | parent [-]

Yup. Getting pretty tired from seeing these "0days" that are not exploitable in any real use case. Just vibes, no substance.

	▲	zeroq 2 hours ago \| parent [-]
		Sad side of this is that decision makers are seeing these and think that AI can replace yet another department in their office. I just saw a nice presentation from SecFest from a guy who ran a red team, but now they pivoted to basically anything and will be more than happy to fix your car if that would pay their bills.