Patchstack: WordPress Security Company
Patchstack is a WordPress security company that disclosed the miniOrange SAML vulnerabilities. They provide vulnerability intelligence and protection for WordPress sites.
Tag: vulnerability disclosure
Positive Technologies: Disclosing TrueConf Vulnerabilities
Positive Technologies is a cybersecurity company that disclosed three vulnerabilities in TrueConf software (BDU:2025-10114, BDU:2025-10115, BDU-2025-10116) that were exploited by Head Mare.…
Bugcrowd: Crowdsourced Security Platform
Bugcrowd is a crowdsourced security platform that facilitated the disclosure of the RovoBlast vulnerability in Atlassian Rovo. The platform rated the issue…
n8n Sandbox Escape Vulnerability Allows OS Command Execution via Workflow Editor
n8n has patched a high-severity expression-sandbox escape vulnerability that allows authenticated workflow editors to execute operating-system commands on the server running the…
GitHub Slashes Public Bug Bounty Payouts by Half, Launches VIP Tier for Top Researchers
Beginning July 27, 2026, GitHub will reduce public bug bounty payouts by at least 50% across all severity levels, moving top rewards…
HackerOne – Bug Bounty Platform
HackerOne is a bug bounty platform used by Intezer to report the Kiro vulnerability to AWS.
Searchlight Cyber: Cybersecurity Research Firm
Searchlight Cyber disclosed technical details of CVE-2026-6875, reporting the vulnerability to ServiceNow on April 1, 2026.
SharkNinja: IoT Security and Vulnerability Disclosure
SharkNinja, the company behind Shark and Ninja appliance brands, is facing criticism for its handling of a critical IoT vulnerability in its…
Mindgard: AI security firm
Mindgard is an AI security firm that discovered and reported the Cursor flaw, publishing full technical details after Cursor failed to patch…
Zero Day Initiative (ZDI)
ZDI is a vulnerability disclosure program run by Trend Micro that rewards researchers for responsibly disclosing vulnerabilities. It provided independent counts and…