A binary you may reverse: you own it, it is your crackme, it is a licensed corpus, it is a vendor tool you bought. Not 'I found it'.
'I found it' is how stolen data enters a lab. It will not enter this one.
Refs: CVE Program
Lab / educational. Public binaries and patched classes only. Isolated VM.