Report a Vulnerability
Submit, help fixing, get kudos.
Start a Bug Bounty
Run your bounty program for free.
492,052 coordinated disclosures
268,540 fixed vulnerabilities
662 bug bounties with 1,340 websites
13,649 researchers, 1033 honor badges

WebwinkelKeur Bug Bounty Program

WebwinkelKeur runs a bug bounty program to ensure the highest security and privacy of its websites. Everyone is eligible to participate in the program subject to the below-mentioned conditions and requirements of WebwinkelKeur

Open Bug Bounty performs triage and verification of the submissions. However, we never intervene to the further process of vulnerability remediation and disclosure between WebwinkelKeur and researchers.

Bug bounty program allow private submissions only.

Bug Bounty Scope

The following websites are within the scope of the program:

webwinkelkeur.nl

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

- Cross Site Scripting (XSS)
- Open Redirect

- Cross Site Request Forgery (CSRF)
- Improper Access Control

General Requirements:

Thanks for warning me about possible safety problems.

As a security researcher, we'd like to ask you to keep ethical standards in mind. Test methods that endanger the stability of our service should not be used.

Testing Requirements:

Test methods that endanger or potentially damage the stability of the website, server or data are excluded.

Please take into account proportionality and subsidiarity, or in other words, is the test method reasonable for the purpose and there is no method with a lower risk and the same result.

Possible Awards:

We will reward discoverers of security problems in an appropriate way. However, there is no room for high financial compensation. For example, the reward may consist of credits, a goodie or a voucher.

Special Notes:

Please note we are a small company and don't have extensive resources to reward for security issues. But we are very happy with every help we get keeping our data safe and we try to reward appropriately.

Other Submissions Handling

Website owner want to receive information about other vulnerabilities

Notifications:

Found serious security issues that can't be published like SQL injection possibilities? Please report them by mailing to [email protected] and [email protected]

General Requirements:

Thanks for warning me about possible safety problems.

As a security researcher, we'd like to ask you to keep ethical standards in mind. Test methods that endanger the stability of our service should not be used.

Testing Requirements:

Test methods that endanger or potentially damage the stability of the website, server or data are excluded.

Please take into account proportionality and subsidiarity, or in other words, is the test method reasonable for the purpose and there is no method with a lower risk and the same result.

Possible Awards:

We will reward discoverers of security problems in an appropriate way. However, there is no room for high financial compensation. For example, the reward may consist of credits, a goodie or a voucher. The more serious the issue, the higher the reward.

Special Notes:

Please note we are a small company and don't have extensive resources to reward for security issues. But we are very happy with every help we get keeping our data safe and we try to reward appropriately.

Community Rating

Provided by security researchers who reported security vulnerabilities via this bug bounty program:

 
Response Time  How quickly researchers get responses to their submissions.
Remediation Time  How quickly reported submissions are fixed.
Cooperation and Respect  How fairly and respectfully researchers are being treated.

Researcher's comments

No comments so far.

  Latest Patched

 21.01.2020 kosmo.com.my
 21.01.2020 grandrapidsmi.gov
 20.01.2020 frandroid.com
 20.01.2020 vanityfair.com
 20.01.2020 utusan.com.my
 20.01.2020 60secondsnow.com
 20.01.2020 zapmeta.ng
 20.01.2020 genyt.net
 20.01.2020 baku.ws
 20.01.2020 cqu.edu.au

  Latest Blog Posts

20.01.2020 by Rando02355205
XSS on "www.alibaba.com" (Alibaba WAF 405) Bypassed.
16.01.2020 by Open Bug Bounty
Brief Recap of Open Bug Bounty’s Record Growth in 2019
12.01.2020 by JCQ_47
WAF Cloudflare Bypass XSS at Nexusmods.com
08.01.2020 by devl00p
Top 100 Open Redirect dorks
08.01.2020 by Rando02355205
XSS WAF Bypassed

  Recent Recommendations

    21 January, 2020
     astroseekcom:
Thank you for report about SQL vulnerability.
    20 January, 2020
     PaulMar23292621:
Miguel showed us several information disclosure issues with our site. Thank you very much Miguel!
    18 January, 2020
     damnitjim:
Thanks for taking the time to report the weaknesses and really appreciate the wapiti tool that you've developed.
    17 January, 2020
     gexsi_search:
Many thanks for your support!
    17 January, 2020
     smay84:
Thank you for your quick response and helpful information.