Coordinated disclosure · non-profit

We disclose vulnerabilities responsibly, in the open.

An open platform to share technical writeups and coordinate disclosure between researchers and vendors. Reading is public; publishing, voting and managing cases requires a session.

Latest publications

Articles, writeups and disclosures

Writeup9.8CVE-2026-10842CWE-1336Remediating

SSTI a RCE en ACME Portal vía plantillas Jinja2

On ACME

El parámetro name del render de plantillas se evalúa server-side sin sandbox, permitiendo ejecución remota de código con una expresión Jinja2.

@n0va 1 min03

Looking for something specific? Use the filterable table