Security Research

Vulnerability Disclosures & Security Research

Explore CVEs, security advisories, bug bounty recognition, and conference research published by CyStack researchers through responsible disclosure.

Companies who awarded our researchers through their bug bounty or private vulnerability disclosure programs. Reports remain private - we share only the recognition.

All researchers
Title (A → Z)
Showing 30 of 34 companies
Alibaba
Alibaba
Reported by TrungNH
AT&T
AT&T
Reported by SonLN
Avalanche
Avalanche
Reported by TrungNH
BBC
BBC
Reported by TrungNH
Bio-Rad
Bio-Rad
Reported by SonLN
BMW
BMW
Reported by TrungNH +1
Booking.com
Booking.com
Reported by HuyNV
D-Link
D-Link
Reported by TrungNH
Daimler
Daimler
Reported by TrungNH
Deloitte
Deloitte
Reported by TrungNH
Electronic Arts
Electronic Arts
Reported by TrungNH
Google
Google
Reported by TrungNH
HackerRank
HackerRank
Reported by TrungNH
HP
HP
Reported by TrungNH
IBM
IBM
Reported by TrungNH +1
Microsoft
Microsoft
Reported by TrungNH
Monash University
Monash University
Reported by TrungNH +1
MTN Group
MTN Group
Reported by TrungNH
NASA
NASA
Reported by TrungNH +1
Nutanix
Nutanix
Reported by TrungNH
PayPal
PayPal
Reported by TrungNH +1
Photobucket
Photobucket
Reported by TrungNH
Porsche
Porsche
Reported by TrungNH
Sea Group
Sea Group
Reported by TrungNH
ServiceNow
ServiceNow
Reported by SonLN
Starbucks
Starbucks
Reported by TrungNH
Synology
Synology
Reported by TrungNH
Tecno Mobile
Tecno Mobile
Reported by HuyNV
Telegram
Telegram
Reported by TrungNH
Trellix
Trellix
Reported by SonLN

Responsible vulnerability disclosure backed by evidence

CyStack researchers investigate security weaknesses, coordinate remediation with affected vendors, and publish verifiable references when disclosure is safe. This archive brings our public vulnerability records, private-program recognition, and technical research together in one place.

CVEs & security advisories

Review disclosed vulnerabilities with identifiers, affected vendors, severity, CVSS scores, publication dates, researchers, and primary references.

Bug bounty recognition

See organizations that recognized findings submitted by CyStack researchers while confidential report details remain protected.

Security talks & papers

Browse technical presentations, papers, and conference contributions produced from CyStack's hands-on security research.