Spatial VDP: How I Rocked-Boosted a NASA XSS from P5 to P2 🚀

Tue, 13 May 2025 00:00:00 +0000

A few months ago, I read an intriguing article by Valerio “MrSaighnal” Alessandroni, detailing how he earned a letter of acknowledgment from NASA for reporting a vulnerability. That story stuck with me.

NASA’s Vulnerability Disclosure Program (VDP) is a non-monetary initiative that invites security researchers to report vulnerabilities in NASA’s public-facing systems. Unlike traditional bug bounties, the reward is purely ethical hacking glory – but with a cosmic twist.

For valid P3 or higher vulnerabilities, researchers receive:

Bugcrowd on Giacomo Lenzini

Spatial VDP: How I Rocked-Boosted a NASA XSS from P5 to P2 🚀