Vulnerability Disclosure Program

Our Commitment

cyber673 is committed to ensuring the security of our systems and data. We value the contributions of security researchers and ethical hackers who help us identify and address potential vulnerabilities. This Vulnerability Disclosure Program (VDP) outlines our guidelines for reporting security vulnerabilities to us.

Scope

This VDP applies to the following systems and assets owned by cyber673:

• Our website: https://cyber673.com
• Any subdomains of cyber673.com
• The cyber673 GitHub repository: https://github.com/cyber673

Any vulnerability found outside this scope is not covered by this VDP.

Guidelines

We ask that you adhere to the following guidelines when researching and reporting vulnerabilities:

• Do not exploit the vulnerability beyond what is necessary to confirm its existence.
• Do not access or modify data that does not belong to you.
• Do not publicly disclose the vulnerability before it has been resolved.
• Provide us with a reasonable timeframe to address the vulnerability before disclosing it publicly.
• Do not perform denial-of-service (DoS) attacks or any actions that could disrupt our services.

Reporting a Vulnerability

To report a vulnerability, please send an email to [email protected] with the following information:

• A detailed description of the vulnerability, including steps to reproduce it.
• The affected system or asset.
• Your contact information (email address or preferred method of communication).

We will acknowledge receipt of your report within 5 business days and will keep you informed of our progress.

Safe Harbor

We consider security research conducted in accordance with this VDP to be authorized. We will not pursue legal action against individuals who report vulnerabilities in good faith and adhere to these guidelines. However, we cannot guarantee that third parties (e.g., law enforcement) will not take action.