Comment by zo9yhylnu
17 hours ago
the writeup you found has been updated to reflect the fact that the exploits provided by the author are not as severe as initially thought.
This suggests they might not have been exploits related to the CVE in question, so what you did might not be enough, be careful.
This makes me wonder if they really vibe coded the whole blog post without verifying anything by themselves. This should stop.
I downloaded the thing, was going to try it out to verify. But the checksum didn't match (probably just a random string generated by an LLM). I left it at that and turned off php.