OpenBugBounty.org > Bug Bounty List > Banco Central do Brasil Bug Bounty Program

Banco Central do Brasil Bug Bounty Program

Banco Central do Brasil runs a bug bounty program to ensure the highest security and privacy of its websites. Everyone is eligible to participate in the program subject to the below-mentioned conditions and requirements of Banco Central do Brasil

Open Bug Bounty performs triage and verification of the submissions. However, we never intervene to the further process of vulnerability remediation and disclosure between Banco Central do Brasil and researchers.

Bug bounty program allow private and public submissions.

Bug Bounty Scope

The following websites are within the scope of the program:

bcb.gov.br

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

- Cross Site Scripting (XSS)
- Open Redirect

- Cross Site Request Forgery (CSRF)
- Improper Access Control

General Requirements:

Evidence of the vulnerability discovered.

Testing Requirements:

Details of the techniques and methodologies used.

Possible Awards:

Recommendation or Mention on the OpenBugBounty web site, after internal approval.

Other Submissions Handling

Website owner want to receive information about other vulnerabilities

Notifications:

[email protected]

General Requirements:

Evidence of the vulnerability discovered.

Testing Requirements:

Details of the techniques and methodologies used.

Possible Awards:

Recommendation or Mention on the OpenBugBounty web site, after internal approval.

Community Rating

Provided by security researchers who reported security vulnerabilities via this bug bounty program:

Researcher's comments

No comments so far.

Latest Patched

Recent Recommendations

13 January, 2025

nzpdev:

Andrea discovered an XSS vulnerability on one of our pages. We promptly patched that thanks to her report. We give top marks for spotting our mistake. Thank you again

20 December, 2024

CygnusEd:

Thank you very much for your reporting a XSS vulnerability on my site.
Thanks also for the friendly communication!
Great job!

10 December, 2024

Sim:

Thank you for identifying an old development project. Information provided was clear allowing a swift removal of the offending code.

10 December, 2024

privacysafe:

Andrea is very professional and reported an issue responsibly and in a timely manner, with great communication about the scope and potential impact. Though it was a low-severity issue, this was nevertheless something in need of patching and we're always grateful at PrivacySafe to security researchers, especially hardworking volunteers like Andrea.

9 December, 2024

Spinner:

Reported an XSS vulnerability on our website, and provided enough details for us to fix it quickly. So helpful!!


Response Time How quickly researchers get responses to their submissions.
Remediation Time How quickly reported submissions are fixed.
Cooperation and Respect How fairly and respectfully researchers are being treated.