CatalogContact
Contact
Email hello@vuln2shell.com for a correction to a catalog page, a public advisory or tracker we missed, a broken link, or press. We only use public sources. We do not accept or publish non-public proof-of-concept files or exploit code, and we do not act as a disclosure channel for unreported bugs.
What to write
For a correction to a page, name the page and include a public source link we can open. That is the bar for a wrong date, a patch or exploitation status that no longer matches the vendor or CISA record, a missed public advisory or tracker, or a broken link.
For press, write to the same address. Say who you are and what you need.
What we do not take
Do not send non-public proof-of-concept files, payloads, or exploit code. The PoC index lists public links only, with a source and a validation status. We will not publish exploit code from private mail.
Do not send unreported bugs here. This site is not a disclosure channel. Send those to the vendor's PSIRT or the project's security contact.
How corrections show up
When a correction is accepted, it is dated in that page's What changed box so readers can see what moved and when. We do not invent CVEs, timestamps, or indicators.