OpenBugBounty.org > Bug Bounty List > Softwarebro Zauner GmbH Co. Bug Bounty Program

Softwarebro Zauner GmbH Co. Bug Bounty Program

Softwarebro Zauner GmbH Co. runs a bug bounty program to ensure the highest security and privacy of its websites. Everyone is eligible to participate in the program subject to the below-mentioned conditions and requirements of Softwarebro Zauner GmbH Co.

Open Bug Bounty performs triage and verification of the submissions. However, we never intervene to the further process of vulnerability remediation and disclosure between Softwarebro Zauner GmbH Co. and researchers.

Bug bounty program allow private and public submissions.

Bug Bounty Scope

The following websites are within the scope of the program:

*.zauner.software

*.zamik.de

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

- Cross Site Scripting (XSS)
- Open Redirect

- Cross Site Request Forgery (CSRF)
- Improper Access Control

General Requirements:

- Always send a working PoC with CVSS score
- Attach screenshots
- Provide brief remediation guidelines

Testing Requirements:

- Focus on security critial vulnerabilities
- Don't use vulnerability scanners performing DoS or DDos attacks
- Don't test during office hours (Mo. - Fr. 08:00 am - 05:00 pm CET / CEST)
- Don't perform social engineering attacks

Possible Awards:

- Recommendation in researcher's profile
- Up to 500 € for critical findings
- Up to 250 € for high-risk findings

Special Notes:

- You must not disclose or discuss any found vulnerabilities anywhere to be eligible to receive an award

Community Rating

Provided by security researchers who reported security vulnerabilities via this bug bounty program:

Researcher's comments

No comments so far.

Latest Patched

Recent Recommendations

23 November, 2023

Renard007:

Grace à Hatim_cf on a pu corrigé une faille mineure de sécurité.

22 November, 2023

nag:

On behalf of our users on one of the pages hosted at users.encs.concordia.ca, I'd like to thank Niko for his effort in finding and responsibly reporting an XSS vuln in one of our user's sites. The XSS was quickly patched after Niko's detailed report making the web a safer place again. Thanks!

22 November, 2023

creality:

Ronald identified an XSS vulnerability on our site which could be fixed fast. Thanks for the provided information!

4 November, 2023

Enzo:

Thank you for fixing the XSS vulnerability

13 October, 2023

Hamza:

I am highly recommending Sajid for web assessments and penetrating testing. Sajid was highly professional and detailed in t heir approach towards finding vulnerabilities.


Response Time How quickly researchers get responses to their submissions.
Remediation Time How quickly reported submissions are fixed.
Cooperation and Respect How fairly and respectfully researchers are being treated.