How would I report an international security vulnerability which could cause a lot of damage?
I am asking how & where I would report this vulnerability, not now to create a simple vulnerability. :)) so & I am trying to trade it to free someone.
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
You need to privately contact the person who manages the software in which you found a vulnerability. Tell them about the vulnerability you found, including how you think it can be exploited and what you think it can do. Give them some time (often in the range of a few months) to verify your claims and provide a solution.
Once they have fixed the issue and a link to a patch has been made available to their customers, contact the CVE list and ask for a CVE number if you're out for the glory.
Edit: be aware that some software providers are morons and refuse to acknowledge their mistakes, so they try and sue whoever presents them with a vuln in order to quiet them and avoid the shame of having security issues in their software. Some cryptology researchers I've met have had this issue time and again with smart card manufacturers. If you suspect you're facing this type of individual, stay anonymous when reporting.