OpenBugBounty.org > Bug Bounty List > HighText Verlag Bug Bounty Program

HighText Verlag Bug Bounty Program

HighText Verlag runs a bug bounty program to ensure the highest security and privacy of its websites. Everyone is eligible to participate in the program subject to the below-mentioned conditions and requirements of HighText Verlag

Open Bug Bounty performs triage and verification of the submissions. However, we never intervene to the further process of vulnerability remediation and disclosure between HighText Verlag and researchers.

Bug bounty program allow private and public submissions.

Bug Bounty Scope

The following websites are within the scope of the program:

*.onetoone.de

*.press1.de

*.hightext.de

*.versandhausberater.de

*.ibusiness.de

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

- Cross Site Scripting (XSS)
- Open Redirect

- Cross Site Request Forgery (CSRF)
- Improper Access Control

General Requirements:

We accept any report describing a technical malfunction or unexpected behaviour with our publicly reachable ressources that is reproducable, results in a security risk for our personnell or users an lies within our responsibility. No Self-XSS, no scoial engineering, no HTTP header suggestions. Currently no CSRF issues to prevent duplicate submissions.

Testing Requirements:

Possible Awards:

We offer bug bounties starting at 30 euros via Paypal, starting with xss/csrf on the low end. Vulnerabilities that work across multiple of our domains or are caused by the same flaw (and therefore are fixed by the same patch) will only be rewarded once.

Special Notes:

You can get a list of currently open issues and often suggested, but rejected 'not a bug'-issues on request.

Other Submissions Handling

Website owner want to receive information about other vulnerabilities

Notifications:

Reports can be sent to [email protected]

General Requirements:

We accept any report describing a technical malfunction or unexpected behaviour with our publicly reachable ressources that is reproducable, results in a security risk for our personnell or users an lies within our responsibility. No Self-XSS, no scoial engineering. Currently no CSRF issues to prenvent duplicate submissions.

Testing Requirements:

Any testing that causes impact to the infrastructure or user experience due to resource usage disqualifies the submitter from any bounty. Please be carefull. Dont do nmap scans or other automated high volume pentesting on our networks. Any attempt to modify or download data beyound requirements for the proof of concept of a vulnerability will also disqualify from any reward.

Possible Awards:

Special Notes:

You can get a list of currently open issues and often suggested, but rejected 'not a bug'-issues on request.

Community Rating

Provided by security researchers who reported security vulnerabilities via this bug bounty program:

Researcher's comments

No comments so far.

HighText Verlag Bug Bounty Program

Bug Bounty Scope

Non-Intrusive Submissions Handling

Other Submissions Handling

Community Rating

Researcher's comments

Latest Patched

Latest Blog Posts

Recent Recommendations


Response Time How quickly researchers get responses to their submissions.
Remediation Time How quickly reported submissions are fixed.
Cooperation and Respect How fairly and respectfully researchers are being treated.