PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

SCW + HackerOne: Leveling up developer security skills with HackerOne vulnerability data

hackerone.com | vulnerability | #vulnerability-management | #secure-coding | #hackerone | #integration | #secure-code-warrior | #developer-training
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne and Secure Code Warrior (SCW) launched a one-way integration linking reported vulnerabilities to matching SCW training modules so developers fix root causes and prevent repeat flaws.
Published
Collected

Related coverage

vulnerability · bugcrowd.com
VRT v1.10 Released: Flash downgrades and extended automotive categorization
Bugcrowd released VRT v1.10: new automotive categories from its Stellantis partnership, Flash entries downgraded to P5 after end of life, and Secure Code Warrior training mappings for remediation.
vulnerability · projectdiscovery.io
Reinventing custom detections and vulnerability management
# Reinventing custom detections and vulnerability management Announcements Nuclei has become a cornerstone of modern security testing, empowering researchers, red teams, and enterprises to detect...
vulnerability · projectdiscovery.io
Open by design, trusted by enterprises: how we keep Nuclei templates reliable at scale
Community-driven Nuclei templates stay enterprise-grade: each YAML template is lab-reproduced, checklist-hardened, and double-reviewed, proving exploitability instead of guessing from versions.
vulnerability · projectdiscovery.io
From Detection to Validation: Fixing Broken Vulnerability Workflows
Version scanning lies by omission: only ~6% of CVEs are exploited. Nuclei validates exploitability at runtime with matchers, extractors, and multi-step flows, as the 2025 CrushFTP cases illustrate.
vulnerability · projectdiscovery.io
The Coverage Lie: Why Current Vulnerability Scanners Fail to Stop Breaches
Legacy scanners fail from untrusted version-based guesses, not coverage gaps: only ~6% of CVEs are exploited, yet weaponization is fast. Runtime validation plus KEV focus yields actionable results.
vulnerability · blog.viettelcybersecurity.com
XSS Discord - Hackerone
A researcher probes Discord's Open Graph link preview, testing og:image and og:video proxy handling for SSRF and potential XSS, documenting filter behaviors and bypass attempts.
Back