u/Dizzy_Seaweed_2756

Hey everyone,

​I submitted my first report on Intigriti recently and I'm a bit confused about how to handle this situation.

​I reported a solid Blind SQL Injection vulnerability. I provided a full PoC including:

​Proof of the vulnerability (100% confirmed).

​Extracted database name.

​Dumped schema showing sensitive columns to prove the impact.

​Just a day after submitting, the vulnerability was completely fixed on the target application, but there is zero response on my report. No triage update, no status change, and no reply to the follow-up comment I left asking for an update.

​Since I fully proved the impact and they clearly used the report to patch the issue, why is there complete silence? Is it normal for programs on Intigriti to patch issues silently before updating the triage status?

​What’s the best way to escalate this with Intigriti support? Thanks!

I recently got a bounty accepted on YesWeHack, but I'm having trouble figuring out the best way to withdraw the funds as a hunter based in Algeria (due to Mangopay / SEPA bank account requirements).

For researchers based in Algeria or countries with similar banking restrictions:

Which bank or virtual account worked best for your payout verification?

How do you handle the name matching / KYC requirements on Mangopay?

Any advice or personal experiences would be greatly appreciated! Thanks in advance.

Who can paste text I copied them form my windows to parrot terminal ? Ctrl+shift+v dont work

Hey everyone,

I currently have 4 reports "Under Review" since April 30th on YWH. I just found a new bug and want to submit it, but the platform isn't letting me.

Is there a limit on pending reports per researcher, or could the program be temporarily suspended? What's the best way to handle this so I don't get duplicated?

Thanks!

Hey everyone,

I have two High severity reports and one Critical report on YesWeHack that have been stuck "Under Review" since April 30 .

Is this timeframe normal for High/Critical bugs on the platform, or should I ping the triagers for an update? How long do you usually wait?

Thanks!

Hi everyone,

​I currently have 3 reports that have been stuck in the "Under Review" status since May 1st. It’s been about two weeks now without any update or change in status.

​I’m starting to wonder if this is a normal timeframe for most programs or if I should reach out for an update? For those of you who have been in the game for a while:

​What is the average time you usually wait for a triager to move from "Under Review" to a final decision?

​At what point do you consider a report "stagnant" and decide to ping the team?

​I’d love to hear about your experiences with response times lately. Thanks!

Title says it all. I want to hear from the community: In your experience, what is the most common factor that causes a report to lose its value during the triage process?

​On the flip side, what’s the best way to "force" an upgrade through a better PoC or impact description?

Hi everyone,

I’m a bit confused about how the points system works on YesWeHack and would appreciate some clarification.

My situation:

My current total reputation is 100 points.

In my dashboard, I have 0 Accepted reports.

I have one report closed as Informative (CVSS 9.8).

I have another high-impact report (Authentication Bypass, CVSS 9.3) which is currently "Under Review".

My question is: How did I reach 100 points if the Critical report is still Under Review and not officially "Accepted" yet? According to the documentation, points are awarded when a report is "Validated." Does this mean my report has already passed the technical validation and I'm just waiting for the bounty/status update?

Is it possible for the points to be revoked if the report ends up being closed as something else later?

Thanks in advance for your help