coordinated-disclosure

Here are 14 public repositories matching this topic...

Keyvanhardani / mythos-research

Outside-in replication of Anthropic's Mythos Preview / Project Glasswing — open-source agentic vulnerability-discovery scaffold on Claude Opus 4.7. Eight-phase sink-guided pipeline, ~$1/run, OSS self-scan and coordinated disclosure.

Updated May 4, 2026
Shell

Perkins-Fund / OnlyVulns

Sponsor

Star

A nonprofit, open-source vulnerability disclosure platform built for security researchers.

nonprofit nonprofits bug-bounty vulnerability-management security-tools nonprofit-organizations responsible-disclosure vulnerability-research security-researcher threat-intelligence-platform security-researchers coordinated-disclosure bug-bounty-platform threat-intelligence-feeds cybersecurity-projects vulnerability-disclosure-program vulnerability-management-platform vulnerability-researcher

Updated Jun 23, 2026
Python

obsrva / obsrva.org

Star

The Internet Observatory (Obsrva) is a vulnerability research project founded by independent security researcher Tyler Butler. Obsrva engages product vendors in coordinated disclosures, publishes vulnerability advisories, and creates proof of concept exploits.

proof-of-concept exploits vulnerability bugbounty responsible-disclosure vulnerability-research coordinated-disclosure

Updated Oct 23, 2021
JavaScript

shaxbozaka / security-audit

Star

Claude Code skill for auditing web apps for security vulnerabilities. Detects inside-codebase vs outside-black-box, runs the right checklist, sweeps server/infra, deep-dives rate-limit posture. 14 PoC probe templates + deep ripgrep recipes.

security security-audit pentest appsec runbook vulnerability-scanner security-research vulnerability-disclosure source-code-audit ghsa coordinated-disclosure claude-code claude-skill github-security-advisory

Updated Apr 24, 2026

ChewKeanHo / research-responsible-disclosure-protocol

Star

[MIRROR] Managing Sensitive and High-Risk Incidents with Confidence and Reliability.

incident-response vulnerability-management responsible-disclosure vulnerability-disclosure disclosure-policy responsible-research coordinated-disclosure security-best-practices protocol-research disclosure-framework

Updated Jun 10, 2026

MichaelAdamGroberman / CVE-2026-32646

Star

CVE-2026-32646: Missing Authentication on Admin Device Endpoint — Gardyn Home Kit (ICSA-26-055-03)

cve iot-security security-research cwe-306 admin-api cisa vulnerability-disclosure coordinated-disclosure gardyn ics-advisory icsa-26-055-03 vu653116 missing-authentication cve-2026-32646

Updated Jun 4, 2026

MichaelAdamGroberman / CVE-2026-25197

Star

CVE-2026-25197: Authorization Bypass via IDOR — Gardyn Home Kit (ICSA-26-055-03)

cve iot-security security-research cisa idor vulnerability-disclosure authorization-bypass coordinated-disclosure gardyn ics-advisory icsa-26-055-03 vu653116 cve-2026-25197 cwe-639

Updated Jun 4, 2026

MichaelAdamGroberman / CVE-2026-32662

Star

CVE-2026-32662: Active Debug Code in Production — Gardyn Home Kit (ICSA-26-055-03)

cve iot-security security-research cisa vulnerability-disclosure coordinated-disclosure gardyn ics-advisory icsa-26-055-03 vu653116 cve-2026-32662 debug-code cwe-489 development-endpoints

Updated Jun 4, 2026

MichaelAdamGroberman / CVE-2026-28767

Star

CVE-2026-28767: Missing Authentication on Admin Notifications Endpoint — Gardyn Home Kit (ICSA-26-055-03)

cve iot-security security-research cwe-306 admin-api cisa vulnerability-disclosure coordinated-disclosure gardyn ics-advisory icsa-26-055-03 vu653116 missing-authentication cve-2026-28767

Updated Jun 4, 2026

MichaelAdamGroberman / CVE-2026-28766

Star

CVE-2026-28766: Missing Authentication on User Account Endpoint — Gardyn Home Kit (ICSA-26-055-03)

cve iot-security security-research cwe-306 cisa vulnerability-disclosure coordinated-disclosure gardyn ics-advisory icsa-26-055-03 vu653116 cve-2026-28766 missing-authentication pii-exposure

Updated Jun 4, 2026

Quantova / security-documentation-repository.

Star

Security policy, vulnerability disclosure, and bug bounty for Quantova, the post-quantum Layer 1 for institutional settlement — how to report, what's in scope, and how disclosure is coordinated.

security bug-bounty post-quantum-cryptography responsible-disclosure security-policy vulnerability-disclosure coordinated-disclosure quantova