Report a Vulnerability
Submit, help fixing, get kudos.
Start a Bug Bounty
Run your bounty program for free.
544,864 coordinated disclosures
350,168 fixed vulnerabilities
823 bug bounties with 1,603 websites
16,833 researchers, 1136 honor badges

LiveAgent Bug Bounty Program

LiveAgent runs a bug bounty program to ensure the highest security and privacy of its websites. Everyone is eligible to participate in the program subject to the below-mentioned conditions and requirements of LiveAgent

Open Bug Bounty performs triage and verification of the submissions. However, we never intervene to the further process of vulnerability remediation and disclosure between LiveAgent and researchers.

Bug bounty program allow private and public submissions.

Bug Bounty Scope

The following websites are within the scope of the program:

*.liveagent.com

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

- Cross Site Scripting (XSS)
- Open Redirect

- Cross Site Request Forgery (CSRF)
- Improper Access Control

General Requirements:

Most up to date terms and conditions of our bug bounty program can be found at https://www.liveagent.com/bug-bounty-program/

Share the details of any suspected vulnerabilities with the LiveAgent Development Team at [email protected] Please do not publicly disclose these details outside of this process without explicit permission. If you want to submit multiple reports at once, please submit only one report (the most important if possible) and wait for a response.

You may only test against a LiveAgent hosted application Account for which you are the Account Owner or an Agent authorized by the Account Owner to conduct such testing.
For example:
*yourdomain*.ladesk.com
We will reward you for the following types of vulnerabilities:

Remote Command Execution (RCE)
SQL Injection
Broken Authentication
Broken Session Management
Access Control Bypass
Cross-Site Scripting (XSS)
Cross-Site Request Forgery (CSRF)
Open URL Redirection
Directory Traversal

Reports of when an attacker can only threaten his own account with Admin role only will not be rewarded with a bounty. XSS caused by an Admin will not be rewarded with a bounty.

Testing Requirements:

In reporting any suspected vulnerabilities, please include as much information as possible. Make sure to always include detailed steps to reproduce the found vulnerability in text form, supported by screenshots and/or video.

Possible Awards:

The standard bounty reward is $50 per bounty concerning LiveAgent web application submitted and verified by our development team.
We will only reward the first reporter of a vulnerability. Duplicate reports will not be rewarded.
Vulnerabilites on our webpage www.liveagent.com are not in the scope of our bug bounty program and will NOT be financially rewarded.

Special Notes:

In order to qualify, the vulnerability must exist in the latest public release (including officially released public betas) of the LiveAgent software. Only security vulnerabilities will qualify. We would love it if people reported other bugs via the appropriate channels, but since the purpose of this program is to fix security vulnerabilities, only bugs that lead to security vulnerabilities will be eligible for rewards. Other bugs will be accepted at our discretion.

We prefer communication by email at [email protected]

Other Submissions Handling

Website owner want to receive information about other vulnerabilities

Notifications:

Most up to date terms and conditions of our bug bounty program can be found at https://www.liveagent.com/bug-bounty-program/
Share the details of any suspected vulnerabilities with the LiveAgent Development Team at [email protected]

General Requirements:

You may only test against a LiveAgent Account for which you are the Account Owner or an Agent authorized by the Account Owner to conduct such testing. For example:
*yourdomain*.ladesk.com
We will reward you for the following types of vulnerabilities:

Remote Command Execution (RCE)
SQL Injection
Broken Authentication
Broken Session Management
Access Control Bypass
Cross-Site Scripting (XSS)
Cross-Site Request Forgery (CSRF)
Open URL Redirection
Directory Traversal

Reports of when an attacker can only threaten his own account with Admin role only will not be rewarded with a bounty. XSS caused by an Admin will not be rewarded with a bounty.

Testing Requirements:

In reporting any suspected vulnerabilities, please include as much information as possible. Make sure to always include detailed steps to reproduce the found vulnerability in text form, supported by screenshots and/or video.

Possible Awards:

The standard bounty reward is $50 per bounty concerning LiveAgent web application submitted and verified by our development team.
We will only reward the first reporter of a vulnerability. Duplicate reports will not be rewarded.
Vulnerabilites on our webpage www.liveagent.com are not in the scope of our bug bounty program and will NOT be financially rewarded.

Special Notes:

We prefer communication by email at [email protected]

Community Rating

Provided by security researchers who reported security vulnerabilities via this bug bounty program:

 
Response Time  How quickly researchers get responses to their submissions.
Remediation Time  How quickly reported submissions are fixed.
Cooperation and Respect  How fairly and respectfully researchers are being treated.

Researcher's comments

No comments so far.

  Latest Patched

 16.07.2020 gamebanana.com
 16.07.2020 forex.com
 16.07.2020 joblab.ru
 16.07.2020 alamy.com
 16.07.2020 flagma.ua
 16.07.2020 terra.com.br
 16.07.2020 men.gov.ma
 15.07.2020 malavida.com
 15.07.2020 conceptdraw.com
 15.07.2020 setopati.com

  Latest Blog Posts

24.06.2020 by Gkexamquiz
How to Find Contacts To Report Bugs & Security Vulnerabilities | Bug Bounty Tutorials 2020
24.06.2020 by 0xcrypto
Improper Access Control - Generic: Unrestricted access to any "connected pack" on docs in coda.io
04.04.2020 by Rando02355205
(Alibaba) message.alibaba.com [IDOR] - [Bug Bounty]
12.03.2020 by Rando02355205
(Paypal) www.paypal.com [CSP High Level] - [XSS Reflected] - [Bug Bounty] - [Write Up]
08.03.2020 by CybeReports
JDECO.net XSS Vulnerability| CybeReports

  Recent Recommendations

    15 July, 2020
     sureshlinux:
Thank you very much for your efforts on finding this bug. It is really appreciated!
    14 July, 2020
     tnyaritm:
Many thanks for your efforts to report the vulnerability and helped us to fix it. I recommend this researcher!
    14 July, 2020
     john_tjp:
we really appreciate such a talent in cybersecurity, it help us to patch the web
    13 July, 2020
     SFgenealogy:
Appreciate your discovery and notification of a bug so that we can increase our security!
    10 July, 2020
     Cajun_Lyrics:
Thank you very much for letting me know about the vulnerabilities on my website, It is really appreciated!