PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

HackerOne Professional Free For Open Source Projects

hackerone.com | vulnerability | #open-source | #vulnerability-disclosure | #hackerone | #community-edition | #free-tier
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne launches the Community Edition: eligible open source projects get the Professional platform for free, including report intake, coordination, duplicate detection and bounty features; projects have resolved 1,200+ reports so far.
Published
Collected

Related coverage

blog · hackerone.com
Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules
This coverage gives security teams current context for monitoring, validation, and remediation.
vulnerability · yeswehack.com
CVE-2023-54391 and beyond: excavating silent patches and the attacker-defender information gap
CVE-2023-54391: a Proxmox VE auth bypass fixed silently in 2023, exploited in 2026 before any advisory. The piece taxonomizes 'silent patch gaps' and why AI-assisted diffing makes them cheap to mine.
vulnerability · hacktron.ai
CVE-2026-1731: Pre-Auth RCE in BeyondTrust Remote Support & PRA
Hacktron AI's agents found a critical pre-auth RCE in BeyondTrust Remote Support and older Privileged Remote Access versions, assigned CVE-2026-1731 with a CVSS 9.9 score.
vulnerability · blog.viettelcybersecurity.com
XSS Discord - Hackerone
A researcher probes Discord's Open Graph link preview, testing og:image and og:video proxy handling for SSRF and potential XSS, documenting filter behaviors and bypass attempts.
vulnerability · netspi.com
NetSPI SQL Injection Wiki
Open-sources NetSPI's SQL injection wiki, a consolidated knowledge base spanning detection through attack queries across DBMSs, covering data extraction, obfuscation, and pivoting past the DB.
blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
Back