OpenBugBounty.org > Bug Bounty List > Keliweb SRL Bug Bounty Program

Keliweb SRL Bug Bounty Program

Keliweb SRL runs a bug bounty program to ensure the highest security and privacy of its websites. Everyone is eligible to participate in the program subject to the below-mentioned conditions and requirements of Keliweb SRL

Open Bug Bounty performs triage and verification of the submissions. However, we never intervene to the further process of vulnerability remediation and disclosure between Keliweb SRL and researchers.

Bug bounty program allow private and public submissions.

Bug Bounty Scope

The following websites are within the scope of the program:

*.keliweb.it

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

- Cross Site Scripting (XSS)
- Open Redirect

- Cross Site Request Forgery (CSRF)
- Improper Access Control

General Requirements:

always send a working PoC with CVSS score, attach screenshots, provide brief remediation guidelines, etc)

Testing Requirements:

restriction to use vulnerability scanners, focus on /e-commerce and /shop URLs, don’t test during weekends, don’t perform social engeneering attacks, etc

Possible Awards:

recommendation in researcher's profile, mention in a Hall of Fame or something more valuable proportional to the researcher's efforts, up to $250 for critical findings, up to $100 for high-risk findings, t-shirts and kudos for other valid findings, etc

Special Notes:

You must not disclose or discuss any found vulnerabilities anywhere to be eligible to receive an award

Community Rating

Provided by security researchers who reported security vulnerabilities via this bug bounty program:

Researcher's comments

14 January, 2022

Manojkhd:

Hi, Keliweb team I found some vulnerability reporting dm support@ but not any response mail.

Latest Patched

Recent Recommendations

22 April, 2024

genoverband:

Thank you for your invaluable help in ensuring the security of our domain and its visitors!

10 April, 2024

Mars:

Hatim uncovered a XSS bug that we were able to quickly resolve. Thanks very much for your assistance and help.

8 April, 2024

Panthermedia:

Thanks to the support of Hatim Chabik, we were able to identify and solve an XSS bug.

5 April, 2024

pubpharm:

Pooja found a XSS vulnerability on our website and provided us with the needed Information for replication and fixing the issue. Which she verified afterwards.
We thank her for the reporting and assistance.

2 April, 2024