OpenBugBounty.org > Bug Bounty List > Short.cm Inc Bug Bounty Program

Short.cm Inc Bug Bounty Program

Short.cm Inc runs a bug bounty program to ensure the highest security and privacy of its websites. Everyone is eligible to participate in the program subject to the below-mentioned conditions and requirements of Short.cm Inc

Open Bug Bounty performs triage and verification of the submissions. However, we never intervene to the further process of vulnerability remediation and disclosure between Short.cm Inc and researchers.

Bug bounty program allow private and public submissions.

Bug Bounty Scope

The following websites are within the scope of the program:

*.short.io

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

- Cross Site Scripting (XSS)
- Open Redirect

- Cross Site Request Forgery (CSRF)
- Improper Access Control

General Requirements:

The bug must meet some requirements to participate in the bug bounty program:

* Give access to other people's private data.
* Allow you to take actions on behalf of other customers.
* Seriously affect service stability.

An example of a valid security issue: Under some conditions, I can see the full link list of another person.

An example of an invalid issue: If a user leaves his laptop unattended, I can change his password on Short.io.

Testing Requirements:

When you notice an appropriate bug, you must send a report through email or chat support. The report has to contain:

* A detailed description of the found vulnerability.
* A detailed description of the steps to reproduce the discovered bug or a working confirmation of its presence (Proof-of-Concept).

After that, we study and evaluate the information you sent. We'll inform you about the results as soon as possible.

You can tell us about any types of bugs. We will always find time and resources to review them and thank you for your searches.

Possible Awards:

Small motivational money

Community Rating

Provided by security researchers who reported security vulnerabilities via this bug bounty program:

Researcher's comments

No comments so far.

Latest Patched

Recent Recommendations

22 April, 2024

genoverband:

Thank you for your invaluable help in ensuring the security of our domain and its visitors!

10 April, 2024

Mars:

Hatim uncovered a XSS bug that we were able to quickly resolve. Thanks very much for your assistance and help.

8 April, 2024

Panthermedia:

Thanks to the support of Hatim Chabik, we were able to identify and solve an XSS bug.

5 April, 2024

pubpharm:

Pooja found a XSS vulnerability on our website and provided us with the needed Information for replication and fixing the issue. Which she verified afterwards.
We thank her for the reporting and assistance.

2 April, 2024