PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

ZeroDisclo.com: Vulnerability disclosure done right

yeswehack.com | vulnerability | #encryption | #platform | #vulnerability-disclosure | #anonymity | #cert | #zerodisclo
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

ZeroDisclo.com, a non-profit platform relaying encrypted, anonymous vulnerability reports to CERTs, redesigned its site with clearer submission forms, an FAQ and a concise disclosure policy.
Published
Collected

Related coverage

vulnerability · yeswehack.com
Mobilising collective intelligence for better security
How to enable 'first contact' in coordinated vulnerability disclosure — via CERTs, security.txt, ZeroDisclo.com and bug bounty — so researchers report bugs instead of going public.
vulnerability · yeswehack.com
CVE-2023-54391 and beyond: excavating silent patches and the attacker-defender information gap
CVE-2023-54391: a Proxmox VE auth bypass fixed silently in 2023, exploited in 2026 before any advisory. The piece taxonomizes 'silent patch gaps' and why AI-assisted diffing makes them cheap to mine.
vulnerability · hackerone.com
Integrate HackerOne directly into your website with Embedded Submissions
HackerOne's Embedded Submissions lets organizations embed its vulnerability report form on their own site with one line of JavaScript, and finders can submit anonymously.
vulnerability · hackerone.com
Your TL;DR Summary of The CERT Guide to Coordinated Vulnerability Disclosure
A TL;DR of Carnegie Mellon's 121-page CERT Guide to Coordinated Vulnerability Disclosure—covering why CVD matters, who to involve, and how to handle process bumps, with key excerpts.
vulnerability · hackerone.com
The Tale of the Privacy Pink Panther
A HackerOne employee recounts being required to power up and unlock a laptop at Paris CDG airport — and why full-disk encryption plus HackerOne's data practices kept customers safe.
vulnerability · projectdiscovery.io
Engineering the future of vulnerability detection
# Engineering the future of vulnerability detection Announcements The security landscape is evolving at an unprecedented pace. What used to be a predictable cycle of patching known vulnerabilities...
Back