OpenBugBounty.org > Bug Bounty List > NZ Personals.com Ltd Bug Bounty Program

NZ Personals.com Ltd Bug Bounty Program

NZ Personals.com Ltd runs a bug bounty program to ensure the highest security and privacy of its websites. Everyone is eligible to participate in the program subject to the below-mentioned conditions and requirements of NZ Personals.com Ltd

Open Bug Bounty performs triage and verification of the submissions. However, we never intervene to the further process of vulnerability remediation and disclosure between NZ Personals.com Ltd and researchers.

Bug bounty program allow private and public submissions.

Bug Bounty Scope

The following websites are within the scope of the program:

nzpersonals.com

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

- Cross Site Scripting (XSS)
- Open Redirect

- Cross Site Request Forgery (CSRF)
- Improper Access Control

General Requirements:

Always send a working PoC with CVSS score
Attach screenshots
Provide brief remediation guidelines

If the vulnerability is unique to a browser, please supply the vendor name and version number.

Specify what testing tools were used, and the tests that were performed.

If you have any suggestions that will help us resolve the vulnerability quicker, please let us know.

Testing Requirements:

You may test for vulnerabilities and send us your report.

You may test in short bursts but please do not bombard our server with endless tests.

Please remember to specify the testing tools that were used, the vulnerabilities found in detail, and any recommended resolutions that might help us resolve the issue

Possible Awards:

We're a small business, we can't afford payouts at this time. Sorry.

The banking industry has restricted our use of payment facilitators simply because our website is in the business of "dating" and "adult content", which means we are now financially hobbled.

This decision may change if we find resolutions to this current problem

Special Notes:

You must not disclose or discuss any found vulnerabilities anywhere to be eligible to receive an award

Community Rating

Provided by security researchers who reported security vulnerabilities via this bug bounty program:

Researcher's comments

No comments so far.

Latest Patched

Recent Recommendations

13 January, 2025

nzpdev:

Andrea discovered an XSS vulnerability on one of our pages. We promptly patched that thanks to her report. We give top marks for spotting our mistake. Thank you again

20 December, 2024

CygnusEd:

Thank you very much for your reporting a XSS vulnerability on my site.
Thanks also for the friendly communication!
Great job!

10 December, 2024

Sim:

Thank you for identifying an old development project. Information provided was clear allowing a swift removal of the offending code.

10 December, 2024

privacysafe:

Andrea is very professional and reported an issue responsibly and in a timely manner, with great communication about the scope and potential impact. Though it was a low-severity issue, this was nevertheless something in need of patching and we're always grateful at PrivacySafe to security researchers, especially hardworking volunteers like Andrea.

9 December, 2024

Spinner:

Reported an XSS vulnerability on our website, and provided enough details for us to fix it quickly. So helpful!!


Response Time How quickly researchers get responses to their submissions.
Remediation Time How quickly reported submissions are fixed.
Cooperation and Respect How fairly and respectfully researchers are being treated.