Report a concern privately
Do not post unpatched vulnerabilities, secrets, access tokens, private data, or exploit instructions in a public issue. For repository-specific vulnerabilities, first check whether GitHub private vulnerability reporting is enabled under the repository’s Security tab.
If no private reporting channel exists, contact the founder using the Magnexis contact page with a non-sensitive summary. Request a suitable private channel before sharing exploit details or sensitive evidence.
What to include
- The affected project and version or commit, if known.
- A short description of the potential impact and relevant prerequisites.
- Reproduction details only in an appropriate private channel, with sensitive content minimized.
Research boundaries
Magnexis and Noxsentra emphasize authorized, defensive research. Nothing on this website grants authorization to probe systems, access third-party data, or perform invasive testing. Do not conduct testing against infrastructure you do not own or have explicit permission to assess.
Disclosure expectations
We aim for clear, responsible communication, but do not publish fixed response-time commitments, bounty offers, or an official coordinated vulnerability disclosure program at this stage.