Infosec Institute

Open Bug Bounty mentioned in the
Top 6 Bug Bounty programs of
2022 by the InfoSec Institute

The Hacker News

Open Bug Bounty named among the
Top 5 Bug Bounty programs of 2021
by The Hacker News

Platform update: please use our new authentication mechanism to securely use the Open Bug Bounty Platform.
For security researchers
Report a Vulnerability
Submit, help fixing, get kudos.
For website owners
Start a Bug Bounty
Run your bounty program for free.
 1,704,055 coordinated disclosures
1,383,099 fixed vulnerabilities
1,991 bug bounty programs, 3,919 websites
46,955 researchers, 1,651 honor badges

OpenBugBounty.org > Bug Bounty List > macabacus.com Bug Bounty Program

macabacus.com Bug Bounty Program

macabacus.com runs a bug bounty program to ensure the highest security and privacy of its websites. Everyone is eligible to participate in the program subject to the below-mentioned conditions and requirements of macabacus.com

Open Bug Bounty performs triage and verification of the submissions. However, we never intervene to the further process of vulnerability remediation and disclosure between macabacus.com and researchers.

Bug bounty program allow private and public submissions.

Bug Bounty Scope

The following websites are within the scope of the program:

macabacus.com
macabacus.com
*.macabacus.com

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

- Cross Site Scripting (XSS)
- Open Redirect

- Cross Site Request Forgery (CSRF)
- Improper Access Control

General Requirements:

There are no general requirements.

Testing Requirements:

There are no testing requirements.

Possible Awards:

Recommendation in researcher's profile.

Other Submissions Handling

Website owner want to receive information about other vulnerabilities

Notifications:

Please email to [email protected]

PGP Key:

Show key

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=m3nX
-----END PGP PUBLIC KEY BLOCK-----

General Requirements:

There are no general requirements.

Testing Requirements:

There are no testing requirements.

Possible Awards:

Recommendation in researcher's profile.

Community Rating

Provided by security researchers who reported security vulnerabilities via this bug bounty program:

 
Response Time  Information How quickly researchers get responses to their submissions.
Remediation Time  Information How quickly reported submissions are fixed.
Cooperation and Respect  Information How fairly and respectfully researchers are being treated.

Researcher's comments

No comments so far.

  Latest Patched

 23.04.2024 data.aad.gov.au
 23.04.2024 bitporno.to
 23.04.2024 sys01.lib.hkbu.edu.hk
 23.04.2024 srvm.gov.za
 22.04.2024 stc.edu.hk
 22.04.2024 friv5online.com
 20.04.2024 brandonfowler.me
 20.04.2024 lingohelp.me
 19.04.2024 getscreen.me
 19.04.2024 mlsi.gov.cy

  Latest Blog Posts

04.12.2023 by BAx99x
Unmasking the Power of Cross-Site Scripting (XSS): Types, Exploitation, Detection, and Tools
04.12.2023 by a13h1_
$1120: ATO Bug in Twitter’s
04.12.2023 by ClumsyLulz
How I found a Zero Day in W3 Schools
04.12.2023 by 24bkdoor
Hack the Web like a Pirate: Identifying Vulnerabilities with Style
04.12.2023 by 24bkdoor
Navigating the Bounty Seas with Open Bug Bounty

  Recent Recommendations

    22 April, 2024
    genoverband:
Thank you for your invaluable help in ensuring the security of our domain and its visitors!
    10 April, 2024
    Mars:
Hatim uncovered a XSS bug that we were able to quickly resolve. Thanks very much for your assistance and help.
    8 April, 2024
    Panthermedia:
Thanks to the support of Hatim Chabik, we were able to identify and solve an XSS bug.
    5 April, 2024
    pubpharm:
Pooja found a XSS vulnerability on our website and provided us with the needed Information for replication and fixing the issue. Which she verified afterwards.
We thank her for the reporting and assistance.
    2 April, 2024
    genoverband:
Thank you for your invaluable help in ensuring the security of our domain and its visitors!
Making Web a Safer Place
Coordinated & Responsible Disclosure
Based on ISO 29147 Guidelines

2023 © OpenBugBounty
  • Follow us