Home » New vulnerabilities reported on HackerOne by TheFloW and ZNullPtr (however they won’t be related for PS4/PS5 hacks)

New vulnerabilities reported on HackerOne by TheFloW and ZNullPtr (however they won’t be related for PS4/PS5 hacks)

by Ethan Marley
0 comment

Obligatory screenshot to please Zecoxao 😉

PlayStation hackers ZNullPtr and TheFloW maintain busy on the PS4/PS5 scene, even when among the work they do may nonetheless stay underneath wraps. Recently, each hackers have (independently) reported new vulnerabilities to Sony relating to their gaming consoles, by way of their HackerOne bug bounty program.

Recently reported vulnerabilities are almost definitely not related to finish customers of the hacking scene

It just isn’t clear on HackerOne itself if the problems are related for PS4 and/or PS5 hacking, however to be completely trustworthy, they’re almost definitely not: TheFloW’s vulnerability granted him a $500 bounty, which is superior pocket cash, don’t get me mistaken, however signifies a “low” affect bug on both the PS4 or PS5. That is actually not a kernel exploit, and presumably not even one thing helpful for console hacks. It may very well be a minor bug that the hacker discovered as a facet impact of on the lookout for deeper vulnerabilities.

As far because the report from ZNullPtr is worried, this one has been marked as closed yesterday. Just from that, it’s not possible to see how important the bug is. We can see that some vital bugs reported e.g. by CTurt (and ZNullPtr himself) have additionally been marked as “closed” previously, however with no disclosure concerned (at the very least not by the “official” HackerOne channel). It might boil all the way down to the person hackers selecting to not disclose the reward quantity, another HackerOne rule, or just the bug being closed as “not in scope”.

In this case nevertheless, ZNullPtr has taken to discord to substantiate that the payout was $500, and the bug “doesn’t comprise something helpful to finish customers”. He additionally didn’t know why the reward quantity wasn’t displayed for his entry on HackerOne.

Bummer.

You may also like

Leave a Comment