Open-source vulnerability disclosure and bug bounty program database
176 vulnerabilities in Samsung preinstalled Android apps
Tools, data, and contact lists relevant to The disclose.io Project.
Independent research white paper by Jon “GainSec” Gaines examining the security posture of a connected public safety technology ecosystem.
The First Open Source Bug Bounty Platform
Agent-assisted maintainership and development framework for Apache projects — Triage, Mentoring, Drafting (agent-authored fixes with human review), and Pairing (developer-side dev-cycle) skills shipping; Agentic Autonomous (auto-merge) on the roadmap.
Mapping from bug bounty and vulnerability disclosure programs to respective GitHub organizations
Misc bounty and vulndisc things
Claude Code skill: turn confirmed vulnerabilities into submission-ready DOCX reports | 漏洞报告成稿 skill（SRC/0day 提交稿、分层验证门、Step 式 PoC、截图铁律）
Open-source vulnerability disclosure policy templates.
Vulnerability analysis and proof of concepts
A standard allowing organizations to nominate security contact points and policies via DNS TXT records.
A Python client for the Global CVE Allocation System.
Vultron is a protocol for Coordinated Vulnerability Disclosure
Content for the CERT Guide to Coordinated Vulnerability Disclosure
A free, open-source, multi-lingual, template-based VDP policy, safe harbor clause, securitytxt, and DNS Security TXT generator.
A collection of templates for generating vulnerability disclosure policies. (NOTE: As of 2024, these templates are now part of the CERT Guide to Coordinated Vulnerability Disclosure, see link in README.)
Open protocol for signed, verifiable machine decisions. Ed25519 receipts, hash-chained audit trails, in-toto predicate type. 3 IETF Internet-Drafts. Apache-2.0.
The Disclose.io Status best practice seal.
Exploit and report for CVE-2023-23396.
To associate your repository with the vulnerability-disclosure topic, visit your repo's landing page and select "manage topics."