Should I disclose a brute force vulnerability?

I found a brute force vulnerability in website with 2,000,000+ users (but is somewhat niche) that allowed me to find passwords, emails, twitter, facebook, and instagram handles, first and last names, and some other information. Is it worth disclosing, …

May 20, 2023
Read More >>