[Sophoclito]

Hola
I was scripting some unfriendly stuff and ran into a security problem on a website of a big company.
Shit isn't "critical" as in server/db exploit, it's just a mailing form issue : their servers can be used to send unlimited mails to any email.

Now my question is, do I report or keep to myself ? (can be used to heavily spam anyone with legit mails from a legit company with fast servers = total anonimity and pretty efficient)

[t0deep4chan]

You should report it since it's quite a major issue that could be used to phish users.

[dingdog7]

If it's a big company, then report it.You might get a certificate, which can help future pentesting careers.

[V3N0M]

Report it and ask for money or certificate or job.