Sign up for a disposable email account using Tor, then email blast a single email with all the details for reproducing the vulnerability to every official email address you can find, including a note that this is an anonymous address and there will be no further contact.<p>The larger problem is what percentage of companies with glaring vulnerabilities in their infrastructure have the competence to fix them?