PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

ASUS Vulnerability Disclosure Déjà vu

hackerone.com | vulnerability | #vulnerability-disclosure | #ftc | #cert-cc | #coordination | #asus
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne flags ASUS's repeated disclosure failures: a researcher's LiveUpdater remote-code-execution report was deflected for weeks before public disclosure, echoing ASUS's 2014 FTC case.
Published
Collected

Related coverage

vulnerability · hackerone.com
Disclosure Assistance Refresh
HackerOne refreshes its Disclosure Assistance service: a new form captures prior contact attempts, vulnerability type and affected assets to help connect friendly hackers with organizations.
vulnerability · hackerone.com
411 for Hackers: Disclosure Assistance
HackerOne's Disclosure Assistance helps researchers report bugs to organizations lacking disclosure programs — 94% of the Forbes Global 2000 — via its Directory and a mediated process.
vulnerability · yeswehack.com
CVE-2023-54391 and beyond: excavating silent patches and the attacker-defender information gap
CVE-2023-54391: a Proxmox VE auth bypass fixed silently in 2023, exploited in 2026 before any advisory. The piece taxonomizes 'silent patch gaps' and why AI-assisted diffing makes them cheap to mine.
vulnerability · yeswehack.com
Mobilising collective intelligence for better security
How to enable 'first contact' in coordinated vulnerability disclosure — via CERTs, security.txt, ZeroDisclo.com and bug bounty — so researchers report bugs instead of going public.
vulnerability · bugcrowd.com
What’s a Vulnerability Disclosure Program?
Following FTC and DOJ guidance, VDP adoption is set to spread widely. Bugcrowd explains what a vulnerability disclosure program is, why it's complex, and what to consider when adopting one.
vulnerability · hacktron.ai
CVE-2026-1731: Pre-Auth RCE in BeyondTrust Remote Support & PRA
Hacktron AI's agents found a critical pre-auth RCE in BeyondTrust Remote Support and older Privileged Remote Access versions, assigned CVE-2026-1731 with a CVSS 9.9 score.
Back