How then do we assess the extent of the vulnerability?<p>As Wes proved, a simple looking RCE can lead to a huge breach of security due to failures in other areas.<p>I agree that limits must be established, but also, these must not end research so abruptly as they can lead to further information.<p>One might argue this is unethical, but a black hat doesn&#x27;t care either way.