OpenBugBounty.org > Bug Bounty List > fd Network Bug Bounty Program

fd Network Bug Bounty Program

fd Network runs a bug bounty program to ensure the highest security and privacy of its websites. Everyone is eligible to participate in the program subject to the below-mentioned conditions and requirements of fd Network

Open Bug Bounty performs triage and verification of the submissions. However, we never intervene to the further process of vulnerability remediation and disclosure between fd Network and researchers.

Bug bounty program allow private and public submissions.

Bug Bounty Scope

The following websites are within the scope of the program:

*.votapex.com

*.fdnetwork.com.au

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

- Cross Site Scripting (XSS)
- Open Redirect

- Cross Site Request Forgery (CSRF)
- Improper Access Control

General Requirements:

- always send a working PoC with a CVSS score
- attach screenshots
- provide brief remediation guidelines

Testing Requirements:

- don’t test during weekends
- don't test during our peak processing period (5am - 7am AEST / 7pm - 9pm UTC / 3pm - 5pm EST / 12pm - 2pm PST)
- don’t perform social engineering attacks

Possible Awards:

- recommendation in the researcher's profile
- mention in a Hall of Fame or something more valuable proportional to the researcher's efforts

Special Notes:

- you must not disclose or discuss any found vulnerabilities anywhere to be eligible to receive an award

Community Rating

Provided by security researchers who reported security vulnerabilities via this bug bounty program:

Researcher's comments

No comments so far.

Latest Patched

Recent Recommendations

13 January, 2025

nzpdev:

Andrea discovered an XSS vulnerability on one of our pages. We promptly patched that thanks to her report. We give top marks for spotting our mistake. Thank you again

20 December, 2024

CygnusEd:

Thank you very much for your reporting a XSS vulnerability on my site.
Thanks also for the friendly communication!
Great job!

10 December, 2024

Sim:

Thank you for identifying an old development project. Information provided was clear allowing a swift removal of the offending code.

10 December, 2024

privacysafe:

Andrea is very professional and reported an issue responsibly and in a timely manner, with great communication about the scope and potential impact. Though it was a low-severity issue, this was nevertheless something in need of patching and we're always grateful at PrivacySafe to security researchers, especially hardworking volunteers like Andrea.

9 December, 2024

Spinner:

Reported an XSS vulnerability on our website, and provided enough details for us to fix it quickly. So helpful!!


Response Time How quickly researchers get responses to their submissions.
Remediation Time How quickly reported submissions are fixed.
Cooperation and Respect How fairly and respectfully researchers are being treated.