(xbow.com)

283 points summarity | 2 comments | 24 Jun 25 15:53 UTC | HN request time: 0.493s | source

Show context

ikmckenz ◴[24 Jun 25 17:53 UTC] No.44368868[source]▶

1. moyix ◴[24 Jun 25 19:25 UTC] No.44369989[source]▶

The main difference is that all of the vulnerabilities reported here are real, many quite critical (XXE, RCE, SQLi, etc.). To be fair there were definitely a lot of XSS, but the main reason for that is that it's a really common vulnerability.

replies(1): >>44373327 #

2. ikmckenz ◴[25 Jun 25 03:07 UTC] No.44373327[source]▶

>>44369989 (TP) #

All of them are real? You have a 100% rate of reports closed as valid?

↑

XBOW, an autonomous penetration tester, has reached the top spot on HackerOne