Hacker Newsnew | past | comments | ask | show | jobs | submitlogin



The main difference is that all of the vulnerabilities reported here are real, many quite critical (XXE, RCE, SQLi, etc.). To be fair there were definitely a lot of XSS, but the main reason for that is that it's a really common vulnerability.


All of them are real? You have a 100% rate of reports closed as valid?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: