Disclosure · relayed by Zerohunt

Report a vulnerability

The organisation has no program on Zerohunt, so the platform team relays your finding to them. Tell us who they are, then describe each issue as its own finding.

Who is it about?

Organisation Required

The company or project the finding is about.

Website Required

Their main site — the affected URL goes in each finding.

Their security contact

Optional — an email, security.txt or disclosure page you already know of.

Your email Required

You are not signed in, so this is the only way Zerohunt can reply. Never shared with the organisation.

Finding 01Untitled finding

Title Required

A clear one-line summary of the vulnerability.

Affected asset Required

The URL, host, app or endpoint affected.

Vulnerability type Required

The category that best fits.

Suggested severity

Optional. Triage makes the final call.

Steps to reproduce Required

Clear, numbered, repeatable steps a triager can follow.

Impact

Why this matters, in real terms — what an attacker gains.

Evidence

Attach screenshots, a PDF write-up or request/response captures. Add notes or links to anything too large to attach.

Drop files, paste a screenshot, or browsePNG · JPEG · WebP · PDF · TXT · LOG · JSON · HAR — up to 10.0 MB each, 8 per finding

For every finding in this submission, I tested without harming the organisation's users or service, accessed nothing beyond what was needed to show the issue, and have not disclosed it publicly.

Cancel1 finding · 0 files