About DIVD DIVD Community Security

Notification email

EN

About DIVD

Who we are
What we do
The team
Contact
FAQ

DIVD Community

Contribute
Become a volunteer
Become a partner
Donate
Newsroom

Security

Code of Conduct
Code of Ethics
Why our work matters
Coordinated Vulnerability Disclosure
ANBI
CSIRT

EN

Wessel Baltus
The Team >
Who we are >
Home >

Wessel Baltus

CSIRT handler

CSIRT cases

DIVD-2024-00039 - Incorrect authorization vulnerability in Apache OFBiz resulting in RCE
DIVD-2024-00026 - Unauthenticated RCE in Rejetto HTTP File Server
DIVD-2024-00020 - Authentication Bypass in GitHub Enterprise Server (GHES)
DIVD-2023-00045 - Confluence RCE Vulnerability In Confluence Data Center and Confluence Server
DIVD-2023-00042 - Confluence improper authorization vulnerability

Show more Show less

DIVD-2023-00002 - Publicly Reachable Malicious Webshells

We aim to make the digital world safer by reporting vulnerabilities we find in digital systems to the people who can fix them. We have a global reach, but do it Dutch style: open, honest, collaborative, and for free.

Become a volunteer Become a partner

About
Security
Stay up to date

Ethics at the base of everything we do

Since we handle sensitive data collected without informed consent, we've created this Code of Conduct to establish an ethical foundation for our work. This code can also be utilized by other researchers involved in what is currently known as responsible disclosure or coordinated vulnerability disclosure.

Code of conduct

Scanning from: AS50559 IPv4: 194.5.73.0/24 aka 194.5.73.0-194.5.73.255 - Our own local infrastructure

© 2024 DIVD. All rights reserved