Coordinated and Responsible Vulnerability Disclosure Free Bug Bounty Program 466,516 coordinated disclosures
249,229 fixed vulnerabilities
617 bug bounties with 1239 websites
12,566 researchers, 974 honor badges

scramble.gg Bug Bounty Program

scramble.gg runs a bug bounty program to ensure the highest security and privacy of its websites. Everyone is eligible to participate in the program subject to the below-mentioned conditions and requirements of scramble.gg

Open Bug Bounty performs triage and verification of the submissions. However, we never intervene to the further process of vulnerability remediation and disclosure between scramble.gg and researchers.

Bug bounty program allow private and public submissions.

Bug Bounty Scope

The following websites are within the scope of the program:

scramble.gg

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

- Cross Site Scripting (XSS)
- Open Redirect

- Cross Site Request Forgery (CSRF)
- Improper Access Control

General Requirements:

No testing please.

Testing Requirements:

No testing please.

Possible Awards:

Thanks/Recommendations.

Special Notes:

No testing please.

Community Rating

Provided by security researchers who reported security vulnerabilities via this bug bounty program:

 
Response Time  How quickly researchers get responses to their submissions.
Remediation Time  How quickly reported submissions are fixed.
Cooperation and Respect  How fairly and respectfully researchers are being treated.

Researcher's comments

No comments so far.

  Latest Patched

 12.11.2019 booklooker.de
 11.11.2019 darty.com
 11.11.2019 rb.ru
 08.11.2019 brickset.com
 08.11.2019 lyricstranslate.com
 08.11.2019 mxplayer.in
 08.11.2019 le.utah.gov
 08.11.2019 upm.es
 08.11.2019 vuze.com
 08.11.2019 k24tv.co.ke

  Latest Blog Posts

30.10.2019 by Nep_1337_1998
Denial of Service vulnerability in script-loader.php (CVE-2018-6389)
17.10.2019 by 0xrocky
Stored XSS
17.10.2019 by geeknik
The "S" in IOT is for Security
16.10.2019 by Fadavvi
Best XSS Vectors
01.10.2019 by Renzi25031469
#Security 100%

  Recent Recommendations

    11 November, 2019
     fislerdata:
Thank you for the assistance. Clearly stated issue, clear report. Thank you for your work
    11 November, 2019
     JosephA44367494:
Special thanks to Nicolas for quickly helping us to patch a vulnerability on our site!
    11 November, 2019
     AmalAyaat:
Thanks for reporting critical vulnerability on one of our sub-domains. We have patched it. Thanks:)
    11 November, 2019
     yikkomolmi:
Thanks for your report. Appreciated your [email protected]:)
    11 November, 2019
     teron60137225:
Thanks for reporting XSS report on our website. Really Appreciated...