What if you 'accidentally' find a vulnerabiliy on a website ?

and the company does not have a bug bounty or VDP program. Is it better to just let it be or to report the company by contacting them without getting into legal trouble?

submitted by /u/-InvictusShadow
[link] [comments]

from hacking: security in practice https://ift.tt/KkjUIpC