PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Streamline Every Aspect of Your Responsible Disclosure Policy with HackerOne Response

hackerone.com | research | #bug-bounty | #compliance | #vdp | #vulnerability-disclosure | #product | #hackerone-response
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne Response streamlines responsible disclosure: without a dedicated channel, reports get lost in info@ inboxes or social DMs; 93% of Forbes Global 2000 companies lacked a known VDP in 2017.
Published
Collected

Related coverage

blog · hackenproof.com
Vulnerability Disclosure Policy: A Guide for Business Leaders
Explains what a vulnerability disclosure policy is and why the EU CRA and NIS2 now make it a compliance expectation, then walks through the key decisions behind each policy section, offering a free template for security and legal teams to adapt.
blog · aikido.dev
Cyber Resilience Act is here! Myth busting and first impressions
Aikido Security's first impressions of the EU Cyber Resilience Act's first reporting deadline, covering the new Single Reporting Platform, its 24/72-hour and 14-day timelines, and compliance myths.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · projectdiscovery.io
PHP2Shell: finding and patching affected PHP
Two CVSS 9.2 bugs in the PHP runtime allow unauthenticated code execution; the patch is a package upgrade and a restart, and this guide shows how to find every PHP runtime you need to patch.
research · certik.com
Inside CertiK's Independent Security Research on Besu
CertiK's chaos-engineering-style testing against a private multi-node Besu testnet uncovered five resource-exhaustion vulnerabilities, patched in Besu 26.7.1 and credited in Besu's release notes.
research · jfrog.com
Critical RCE Vulnerability CVE-2025-11953 Puts React Native Developers at Risk
JFrog discloses CVE-2025-11953 (CVSS 9.8): unauthenticated RCE in the @react-native-community/cli dev server lets attackers run OS commands; a related flaw exposes Metro to network attacks.
Back