@_anonysm Yup more than serious :) The RCE was on an appliance that was publicly available but wasn't updated on time, I crafter the n-day POC that wasn't available then and reported it.
@haxor31337@s3c_krd I once reported a vuln to a private program vdp and they decided cuz of the severity to instead triage it on their other private bbp program that I had no idea that existed.
Always good to get something out of VDPs as well :)
When something is worth their time there are many times that they will also provide rewards for findings