Infosec Institute

Open Bug Bounty mentioned in the
Top 6 Bug Bounty programs of
2022 by the InfoSec Institute

The Hacker News

Open Bug Bounty named among the
Top 5 Bug Bounty programs of 2021
by The Hacker News

For security researchers
Report a Vulnerability
Submit, help fixing, get kudos.
For website owners
Start a Bug Bounty
Run your bounty program for free.
 1,753,383 coordinated disclosures
1,440,376 fixed vulnerabilities
2,054 bug bounty programs, 3,989 websites
52,808 researchers, 1,710 honor badges

OpenBugBounty.org > Bug Bounty List > nk.ca Bug Bounty Program

nk.ca Bug Bounty Program

nk.ca runs a bug bounty program to ensure the highest security and privacy of its websites. Everyone is eligible to participate in the program subject to the below-mentioned conditions and requirements of nk.ca

Open Bug Bounty performs triage and verification of the submissions. However, we never intervene to the further process of vulnerability remediation and disclosure between nk.ca and researchers.

Bug bounty program allow private and public submissions.

Bug Bounty Scope

The following websites are within the scope of the program:

nk.ca
secure.nl2k.ab.ca

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

- Cross Site Scripting (XSS)
- Open Redirect

- Cross Site Request Forgery (CSRF)
- Improper Access Control

General Requirements:

No general requirements

Testing Requirements:

No testing requirements

Possible Awards:

No possible awards

Community Rating

Provided by security researchers who reported security vulnerabilities via this bug bounty program:

 
Response Time  Information How quickly researchers get responses to their submissions.
Remediation Time  Information How quickly reported submissions are fixed.
Cooperation and Respect  Information How fairly and respectfully researchers are being treated.

Researcher's comments

No comments so far.

  Latest Patched

 09.10.2024 rolexgrade.me
 09.10.2024 contracostavote.gov
 08.10.2024 activecampaign.com
 08.10.2024 juazeiro.ba.gov.br
 08.10.2024 vdo.ai
 04.10.2024 brk.im
 04.10.2024 bowerystation.openhouse.me
 03.10.2024 dorfy.ai
 03.10.2024 academy-mind2.me
 03.10.2024 hp.com

  Latest Blog Posts

04.12.2023 by BAx99x
Unmasking the Power of Cross-Site Scripting (XSS): Types, Exploitation, Detection, and Tools
04.12.2023 by a13h1_
$1120: ATO Bug in Twitter’s
04.12.2023 by ClumsyLulz
How I found a Zero Day in W3 Schools
04.12.2023 by 24bkdoor
Hack the Web like a Pirate: Identifying Vulnerabilities with Style
04.12.2023 by 24bkdoor
Navigating the Bounty Seas with Open Bug Bounty

  Recent Recommendations

    4 October, 2024
    mods4cars:
A big THANK YOU to Dipu1a for bringing several XSS vulnerabilities on our website to our attention and giving helpful pointers how to fix. Greatly appreciated and highly recommended!
    23 September, 2024
    ajk99:
Found a valid issue. Clear and rapid communication.
    21 September, 2024
    ironblack:
Andrea found an XSS bug in one of our forms which was left over after some security fixes we did. Although the openbugbounty staff was not able to reproduce the issue, the issue was there and he promptly contacted us to tell the issue and have us fixed, in a pure collaborative and responsible disclosure fashion. Thank you again for your precious input!
    19 September, 2024
    hardg:
The researcher gave a very clear report, including steps to reproduce, and also communicated clearly and promptly. Many thanks for your research and coordinated disclosure!
    18 September, 2024
    jk22095:
I strongly recommend AsiB_ug for their excellent work in finding critical vulnerabilities in publicly accessible database and backup files on several websites.Thanks to his quick actions, we were able to implement necessary security measures promptly.
Making Web a Safer Place
Coordinated & Responsible Disclosure
Based on ISO 29147 Guidelines

2024 © OpenBugBounty
  • Follow us