Vulnerability disclosure
Found a problem here?
Report it privately. Include enough evidence to reproduce the issue without accessing anyone else’s data or disrupting the site.
Send a security reportIn scope
- z0r0vul.xyz and pages served directly from this domain
- Accidental exposure of private data or credentials
- A vulnerability that affects the confidentiality or integrity of this site
Out of scope
- Automated scanner output without a demonstrated impact
- Missing headers or best-practice settings with no exploit path
- Denial of service, traffic flooding or resource exhaustion
- Social engineering, physical testing or third-party services
What to include
01
The affected URL or component
02
Exact steps needed to reproduce it
03
Observed impact and any assumptions
04
Your preferred name for acknowledgement
Safe-harbour intent
Good-faith research that follows this policy, avoids privacy harm and stops after demonstrating impact will be treated as authorised for this site. If you are unsure whether a test is safe, ask before running it.