Security

Report a vulnerability

Found a security issue in CVERadar? Tell us privately. Reports go straight to the security team, and we reply to the e-mail address you give.

Disclosure policy

In scope

The CVERadar web application at cve.vyreon.ro, its API, authentication, data ingestion and AI features.

Please

give us reasonable time to fix the issue before you disclose it publicly;
only test against accounts and data you own;
avoid privacy violations, data destruction and service disruption (no DoS or spam testing);
include clear steps to reproduce, so we can confirm the issue quickly.

What happens next

You get a reference number right away. We triage every report, keep you updated by e-mail, and credit you when the fix ships if you wish.

Your data

We store your name, e-mail address, IP address and browser user agent with the report, only to handle it and to prevent abuse. Reports are deleted automatically after 365 days.

Your report

Fields marked with an asterisk are required. Please do not include real personal data of other people.

Name (optional)

E-mail

So we can reply to you.

Affected area

Severity estimate (optional)

Title

Description

What is the issue and what can an attacker do with it? 50 to 10,000 characters. Plain text only.

Steps to reproduce (optional)

Security code

Type the characters in the image (not case-sensitive).

I agree to coordinated disclosure: I will not share details of this issue publicly until it is fixed or a disclosure date has been agreed.

One report per hour per network.