OpenBugBounty.org > Bug Bounty List > siedler3.net Bug Bounty Program

siedler3.net Bug Bounty Program

siedler3.net runs a bug bounty program to ensure the highest security and privacy of its websites. Everyone is eligible to participate in the program subject to the below-mentioned conditions and requirements of siedler3.net

Open Bug Bounty performs triage and verification of the submissions. However, we never intervene to the further process of vulnerability remediation and disclosure between siedler3.net and researchers.

Bug bounty program allow private submissions only.

Bug Bounty Scope

The following websites are within the scope of the program:

*.siedler3.net

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

- Cross Site Scripting (XSS)
- Open Redirect

- Cross Site Request Forgery (CSRF)
- Improper Access Control

General Requirements:

Please always send a working PoC and screen shots. Remediation guidelines are welcome.

Testing Requirements:

* Please don't use social engineering
* Please don't cross the line by extracting data or putting more data in than just what is necessary for a PoC.
• Do not make changes to the system or application.
• Do not use Denial of Service attacks or brute force access.
• As per the OBB rules: do not use vulnerability scanners and other automated tools that may impact website performance or cause any other negative impact.

Possible Awards:

As we are a non-profit site to keep the classic game Settlers 3 alive for multi player gaming we don't generate any revenue we could pay any awards with. We are happy to send a post card for confirmed issues though.

Community Rating

Provided by security researchers who reported security vulnerabilities via this bug bounty program:

Researcher's comments

No comments so far.

Latest Patched

Recent Recommendations

10 April, 2024

Mars:

Hatim uncovered a XSS bug that we were able to quickly resolve. Thanks very much for your assistance and help.

8 April, 2024

Panthermedia:

Thanks to the support of Hatim Chabik, we were able to identify and solve an XSS bug.

5 April, 2024

pubpharm:

Pooja found a XSS vulnerability on our website and provided us with the needed Information for replication and fixing the issue. Which she verified afterwards.
We thank her for the reporting and assistance.

2 April, 2024

genoverband:

Thank you for your invaluable help in ensuring the security of our domain and its visitors!

20 March, 2024

TechVitaverdura:

Great exchanges with this person, thank you for your help and your report


Response Time How quickly researchers get responses to their submissions.
Remediation Time How quickly reported submissions are fixed.
Cooperation and Respect How fairly and respectfully researchers are being treated.