Vulnerability Disclosure Program

.wrapper { display:none; } .footer { display:none; } body { -ms-overflow-style: scrollbar; overflow-y: scroll; overscroll-behavior-y: none; } .errorContainer { background-color: #FFF; color: #0F1419; max-width: 600px; margin: 0 auto; padding: 10%; font-family: Helvetica, sans-serif; font-size: 16px; } .errorButton { margin: 3em 0; } .errorButton a { background: #1DA1F2; border-radius: 2.5em; color: white; padding: 1em 2em; text-decoration: none; } .errorButton a:hover, .errorButton a:focus { background: rgb(26, 145, 218); } .errorFooter { color: #657786; font-size: 80%; line-height: 1.5; padding: 1em 0; } .errorFooter a, .errorFooter a:visited { color: #657786; text-decoration: none; padding-right: 1em; } .errorFooter a:hover, .errorFooter a:active { text-decoration: underline; } #placeholder, #react-root { display: none !important; } body { background-color: #FFF !important; }

JavaScript is not available.

We’ve detected that JavaScript is disabled in this browser. Please enable JavaScript or switch to a supported browser to continue using openbugbounty.org.

2022 © OpenBugBounty

Open Bug Bounty selected among the
Top 5 Bug Bounty programs to watch
in 2021 by The Hacker News

For Researchers

Report a Vulnerability Report and help remediate a vulnerability found on any website	Write a Blog Post Write a blog post to share your knowledge and get kudos
Browse Bug Bounty Programs Browse active bug bounty programs run by website owners	Ask a Question Ask questions and share your improvement ideas

How it Works

Download presentation and learn
how our platform works

PDF, 1MB

For Owners

Start a Bug Bounty Start your bug bounty program at no cost and leverage crowd-security testing	Ask a Question Ask questions or let us know how to make Open Bug Bounty even better
API Request National CERTs and law enforcement agencies may request our API

How it Works

Download presentation and learn
how our platform works

PDF, 1MB

Hall of Fame

Top Security Researchers They make Web a safer place by reporting and helping remediate vulnerabilities	Acknowledgements Website owners share their experience of collaboration with the researchers

How it Works

Download presentation and learn
how our platform works

PDF, 1MB

About

About the Project Read about Open Bug Bounty history, values and mission	Latest Reports Browse the most recent vulnerability submissions
Contact Us Get in touch

How it Works

Download presentation and learn
how our platform works

PDF, 1MB

Forum
Blog

OpenBugBounty.org > Report Vulnerability

Make web a safer place and become a cybersecurity hero.

Open Bug Bounty for Security Researchers

In order to report a vulnerability via Open Bug Bounty you should login via your Twitter
Account first

Latest Patched

16.05.2022 baclieu.gov.vn

16.05.2022 essuir.sumdu.edu.ua

16.05.2022 westerncape.gov.za

16.05.2022 mobilecentre.am

16.05.2022 e-store.bluebrand.me

16.05.2022 jic.edu.sa

16.05.2022 faculdadefacit.edu.br

16.05.2022 dochkisinochki.ru

16.05.2022 uner.edu.ar

16.05.2022 trangnguyen.edu.vn

Latest Blog Posts

15.02.2022 by sepkatpro
Ultimate XSS Polyglot

11.11.2021 by mistry4592
The Most used Chrome Extensions are Used For Penetration Testing.

08.10.2021 by NNeuchi
How I Found My First Bug Reflected Xss On PIA.GOV.PH(Philippine Information Agency)

26.08.2021 by PyaePhyoThu98
eG Manager v7.1.2: Improper Access Control lead to Remote Code Execution (CVE-2020-8591)

14.07.2021 by Open Bug Bounty
Interview With Open Bug Bounty

Recent Recommendations

28 April, 2022

notedekd:

@singhnitesh21 provides precise and comprehensive vulnerable information. I highly appreciate the support and quick response.

27 April, 2022

CERT_rlp:

The team of CERT-rlp would like to thank Antonio for a responsible and coordinated disclosure of vulnerabilities

25 April, 2022

DeanHalter:

Appreciate the skill and effort Nitesh and others in the open bounty, ethical hacker community bring to the table. He pointed out an XSS vulnerability on our website.

22 April, 2022

TiagoGuedesEGo1:

Pranjal made us aware of several security vulnerabilities that represented security flaws of several degrees and needed to be rectified.

It was a pleasure working with him and I hope we can work again in the future, Thank you!

20 April, 2022

DeanHalter:

Thank you for reporting the pair of XSS issues you found on our site. Your expertise and ethical reporting/handling helped us secure our website. Keep up the great and necessary work.

Making Web a Safer Place

Coordinated & Responsible Disclosure

Based on ISO 29147 Guidelines