They would not catch it, it requires combining multiple vulns. | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

f311a 85 days ago | parent | context | favorite | on: I found a WordPress RCEs with GPT5.6 and $25

They would not catch it, it requires combining multiple vulns.

lillesvin 85 days ago [–]

I just meant the SQLi (which is the basis of the chain), not the full chain.

StrauXX 84 days ago | [–]

There is likely thousands of such SQL concatenations throughout the codebase. The issue with traditional SAST tools is that they can't readon about context.

Consider applying for YC's Winter 2027 batch! Applications are open till November 2.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact