OpenBugBounty.org > Bug Bounty List > nzflatmates Bug Bounty Program

nzflatmates Bug Bounty Program

nzflatmates runs a bug bounty program to ensure the highest security and privacy of its websites. Everyone is eligible to participate in the program subject to the below-mentioned conditions and requirements of nzflatmates

Open Bug Bounty performs triage and verification of the submissions. However, we never intervene to the further process of vulnerability remediation and disclosure between nzflatmates and researchers.

Bug bounty program allow private submissions only.

Bug Bounty Scope

The following websites are within the scope of the program:

nzflatmates.co.nz

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

- Cross Site Scripting (XSS)
- Open Redirect

- Cross Site Request Forgery (CSRF)
- Improper Access Control

General Requirements:

- Describe the issue and how it could be exploited
- Provide a working PoC if you can
- Screenshots are useful

Testing Requirements:

No testing requirements

Possible Awards:

We appreciate your help. Where a vulnerability of some significance is identified we may (at our discretion) choose to offer a small token reward in cash or equivalent to recognise the researcher's effort.

Please bear in mind we are a small business running a free website (which currently loses us money), so we don't have the resources to offer large rewards.

Special Notes:

To be eligible to receive a reward you must not discuss or disclose found vulnerabilities anywhere.

Other Submissions Handling

Website owner want to receive information about other vulnerabilities

Notifications:

[email protected]

General Requirements:

- Describe the issue and how it could be exploited
- Provide a working PoC if you can
- Screenshots are useful

Testing Requirements:

- Don't perform social engineering attacks
- Don't run scans that may put excessive load on our servers

Possible Awards:

Special Notes:

To be eligible to receive a reward you must not discuss or disclose found vulnerabilities anywhere.

Community Rating

Provided by security researchers who reported security vulnerabilities via this bug bounty program:

Researcher's comments

No comments so far.

Latest Patched

Recent Recommendations

26 May, 2023

DelganGeor63536:

navreet1425 was professional in his vulnerability disclosure.I really appreciates his work.

26 May, 2023

Harpree66584431:

Thank you for finding vulnerability in our website

23 May, 2023

MinasPergantis:

Thank you for your help in ensuring the security of our domain and its visitors! Your contributions are invaluable.

17 May, 2023

franky1302:

Thanks Khan Janny for letting us know and fix the issue.


Response Time How quickly researchers get responses to their submissions.
Remediation Time How quickly reported submissions are fixed.
Cooperation and Respect How fairly and respectfully researchers are being treated.