Vulnerability-Disclosure-Policy

漏洞披露政策 我们认为漏洞披露是双向的。供应商和研究人员都必须参与协调漏洞披露。当 Enable Security 通过自身研究发现漏洞时，将通知供应商这些漏洞，并在首次联系 90 天后（或更早，如果供应商发布修复程序）与防御社区公开分享详细信息。 Enable Security 将尽合理努力与供应商建立保密沟通。 一旦与供应商的安全团队或指定联系人取得联系，Enable Security 将传达漏洞的全部详细信息，以及本政策的链接和当前计划的披露日期。 Enable Security 将向供应商提供合理协助，以帮助其理解所发现漏洞的重要性。 如果供应商在 7...

knihovnahod.cz Cross Site Scripting vulnerability OBB-3889987

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

fcrc.albertahealthservices.ca Cross Site Scripting vulnerability OBB-3569604

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...