Vulnerability Submission Form

National Vulnerability & Intelligence Management

If you believe you have discovered a security vulnerability affecting any federal, provincial, or private website, application, tool, or service used in Pakistan, please report it below. Reporters who follow responsible disclosure procedures may receive recognition from PKCERT. Verify Your Certificate

Reporter Information

Full Name *

Email *

Country *

Contact Number / Handle

Organization / University

Affected Asset(s)

Organization / Vendor Name

Affected System / Application

Component

URL(s) / IP(s) *

Version / Build (Optional)

Vulnerability Details

Vulnerability Title *

Vulnerability Type *

Severity Level

CVSS v3.x Score (if known)

Suspected Zero-Day?

Description *

Insecure Design (Optional)

Timeline & Communication

When Discovered

Contact for clarification?

Preferred Contact

Impact Assessment

Potential Impact

Evidence of exploitation in the wild?

Estimated affected users/records

Evidence

Upload Evidence (PDF/ZIP, Max 10MB) *

Click to Upload Evidence

Max file size: 10 MB. PDF preferred.

Timestamps & Timezone

Test Account Credentials

Suggested Mitigation (Optional)

Recommendation

Immediate Remediation (Workarounds)

Recognition & Certificate

Recognition if Validated

Preferred Name for Certificate

Postal Address (for physical certificate)

LinkedIn Profile URL

Disclosure Preference

I consent to be publicly credited

I prefer to remain anonymous

Please withhold public disclosure until:

Legal Safe Harbor & Confirmation

I confirm that testing and evidence submission were done in good faith. I did not exfiltrate or misuse data. I will cooperate during triage and remediation. I agree to the National CERT NVIM Terms.

Protects public digital infrastructure of Pakistan.

Submission Successful!