PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Infographic: What are Vulnerabilities?

bugcrowd.com | vulnerability | #bugcrowd | #vulnerability-disclosure | #basics | #vulnerabilities | #cybersecurity | #vulnerability-101 | #infographic | #iso-29147 | #security-basics | #iso-iec-29147
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bugcrowd's Vulnerability 101 infographic explains what vulnerabilities are, citing ISO/IEC 29147:2018 and covering their causes, prevalence, how they are surfaced, and who finds them.
Published
Collected

Related coverage

blog · bugcrowd.com
15 Scary Security Stats that’ll Leave You Hollow Inside
A Bugcrowd Halloween infographic rounding up 15 alarming cybersecurity statistics on cybercrime, data breaches, fraud, and vulnerabilities drawn from several industry demographics.
vulnerability · bugcrowd.com
Remote code execution (RCE) 101
A primer on remote code execution that treats RCE as an impact rather than a single bug, surveying entry points from file upload and command injection to SQLi, XXE, SSTI, and SSRF.
vulnerability · bugcrowd.com
Bugcrowd Announces the Availability of Self-Service Vulnerability Disclosure Programs
Bugcrowd launches self-service Vulnerability Disclosure Programs: a structured intake and triage pipeline for bug reports, with managed triage for the first 15 or 75 submissions.
vulnerability · bugcrowd.com
Vulnerability Disclosure Programs: Luxury or Necessity?
Bugcrowd's infographic weighs the consequences of lacking a Vulnerability Disclosure Program, arguing VDPs are a necessity that strengthens security posture and reputation rather than a luxury.
vulnerability · bugcrowd.com
The Who, What, Where, and Why of VDPs
An iPhone app averages nearly 50,000 lines of code, making pre-release vulnerability coverage impossible alone. This infographic explains why VDPs are becoming a baseline security practice.
vulnerability · yeswehack.com
CVE-2023-54391 and beyond: excavating silent patches and the attacker-defender information gap
CVE-2023-54391: a Proxmox VE auth bypass fixed silently in 2023, exploited in 2026 before any advisory. The piece taxonomizes 'silent patch gaps' and why AI-assisted diffing makes them cheap to mine.
Back