Report a Vulnerability
Submit, help fixing, get kudos.
Start a Bug Bounty
Run your bounty program for free.
530,785 coordinated disclosures
286,808 fixed vulnerabilities
731 bug bounties with 1,446 websites
14,847 researchers, 1070 honor badges

  Please, login via Twitter first




Coordinated and Responsible Vulnerability Disclosure

Here you can submit a vulnerability via the Open Bug Bounty following coordinated and responsible disclosure:

Use only non-intrusive testing techniques that will not affect confidentiality, integrity or availability of the website, any related data or infrastructure.
Notify website owner in a prompt and reliable manner to help fixing the vulnerability, follow ISO 29147 guidelines of responsible disclosure.
Avoid reporting any vulnerabilities that will unlikely be fixed by the website owner.
Follow technical submission guidelines, otherwise submission may be declined.

Vulnerability Details

Vulnerability type:
* XSS URL:
POST data: appication/x-www-form-urlencoded
POST data example:


key1=value1&key2=value2
           
Cookies:
* CMS name:

Notifications

ISO 29147 Recommend Notification:
Notify subscribers:
A notification without technical details can be also sent to a specific security email you have for this submission. Please try to find the most appropriate one.
Send notification via twitter:
Automatic Disclosure:
 


  Latest Patched

 28.03.2020 shorturl.at
 28.03.2020 degruyter.com
 28.03.2020 letmejerk3.com
 28.03.2020 vanityfair.com
 28.03.2020 team1x1.com
 28.03.2020 extrabux.com
 28.03.2020 seguradoralider.com.br
 28.03.2020 link-assistant.com
 28.03.2020 calculator.net
 28.03.2020 booklooker.de

  Latest Blog Posts

12.03.2020 by Rando02355205
(Paypal) www.paypal.com [CSP High Level] - [XSS Reflected] - [Bug Bounty] - [Write Up]
08.03.2020 by CybeReports
JDECO.net XSS Vulnerability| CybeReports
29.02.2020 by Rando02355205
(Google) groups.google.com - [Stored XSS] - [Bug Bounty] - [WriteUp] - [24/02/2020]
10.02.2020 by 0xrocky
Stored XSS on h2biz.net
10.02.2020 by ismailtsdln
SQL Injection Payload List

  Recent Recommendations

    27 March, 2020
     hstead:
Very rapid communication and detailed instructions as to how to fix the issue. Thanks for the assistance.
    27 March, 2020
     PaulMar23292621:
r00tpgp reported a serious issue to us and helped us with reproducing the issue and pushing towards a fix for the problem.
Thank you very much for the great work!
    27 March, 2020
     Michael3277:
Thanks for your report. With your help we could find the bug and make our Website safer!

roker is a friendly Security Resercher who is answering very fast to mails!
    26 March, 2020
     KyleGeorgeArch:
Thank you ElProfesor for responsibly disclosing an XSS issue and providing the reproduction steps. With your help we've identified the issue and are working on a fix. Thank you for your hard work and responsible practices.
    25 March, 2020
     KyleGeorgeArch:
ianf0ns3c identified an XSS issue and provided the reproduction steps in a polite and timely manner, giving us all the information we needed to investigate and take it to our developers. We're grateful for his work on the matter.