PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

HackerOne CEO joins Node.js Foundation Board

hackerone.com | vulnerability | #bug-bounty | #open-source | #cve | #interview | #hackerone | #nodejs | #foundation
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne joins the Node.js Foundation with CEO Marten Mickos on its board; he discusses the platform's 140,000 hackers, 55,000 fixed vulnerabilities, and CVE work with the Node Security Project.
Published
Collected

Related coverage

vulnerability · hackerone.com
HackerOne Joins Forces with Node.js Foundation to Build a Safer Internet
HackerOne joins the Node.js Foundation as a Silver member, boosting open-source security work with disclosures for GitLab, WordPress and Nextcloud and Internet Bug Bounty's infrastructure rewards.
vulnerability · blog.quarkslab.com
Snapshotting our way to CVE-2026-9539
This blog post presents a LibAFL-Qemu based way to explore state machines and why we failed to find CVE-2026-9539.
vulnerability · about.gitlab.com
Pillow CVE-2026-112900: How to find and fix it with GitLab
Upgrade to Pillow 13.0.0, then use dependency scanning, code search, and GitLab Duo Agent Platform to patch every affected Python project in your groups.
vulnerability · about.gitlab.com
Critical remote code execution in vm2, a widely used Node.js sandbox library
GitLab's Threat Research Group found a critical vm2 sandbox escape (CVSS 10.0) reachable with require.external enabled per the library's README; v3.11.7 blocks it, but config hardening is still urged.
vulnerability · yeswehack.com
Server side prototype pollution, how to detect and exploit
Server-side prototype pollution in JavaScript: how prototypes work, how to detect vulnerable targets in black-box testing, and gadget hunting in libraries such as Express, Fastify and Axios.
vulnerability · yeswehack.com
Vulnerability Disclosure Policy through the eyes of a bug hunter
An interview with ethical hacker Clement 'SaxX' Domingo on what a Vulnerability Disclosure Policy is, how it differs from bug bounty programs, and why few companies have set one up.
Back