Open Bug Bounty selected among the
Top 5 Bug Bounty programs to watch
in 2021 by The Hacker News

For security researchers
Report a Vulnerability
Submit, help fixing, get kudos.
For website owners
Start a Bug Bounty
Run your bounty program for free.
1,099,431 coordinated disclosures
669,594 fixed vulnerabilities
1,433 bug bounty programs, 2,855 websites
25,144 researchers, 1,374 honor badges

Coordinated Disclosure Vulnerability

This vulnerability was reported via our coordinated disclosure Open Bug Bounty program and patched.

  Latest Patched

 18.10.2021 elsoldemexico.com.mx
 18.10.2021 laundrygenie.me
 18.10.2021 coredna.com
 17.10.2021 bioguayas.braining.ws
 17.10.2021 pml.nist.gov
 17.10.2021 physics.nist.gov
 17.10.2021 gamebanana.com
 17.10.2021 freeadsciti.com
 16.10.2021 maine.gov

  Latest Blog Posts

08.10.2021 by NNeuchi
How I Found My First Bug Reflected Xss On PIA.GOV.PH(Philippine Information Agency)
26.08.2021 by PyaePhyoThu98
eG Manager v7.1.2: Improper Access Control lead to Remote Code Execution (CVE-2020-8591)
14.07.2021 by Open Bug Bounty
Interview With Open Bug Bounty
25.05.2021 by 0xrocky
Google XSS Game
25.05.2021 by ShivanshMalik12
Testing for XSS (Cross Site Scripting)

  Recent Recommendations

@abulte     15 October, 2021
    Twitter abulte:
JlsPentest has responsibly disclosed a confirmed vulnerability. It had already been patched on our latest dev build but we still appreciated the report and the professional way it has been handled.
@vinitbhoir543     15 October, 2021
    Twitter vinitbhoir543:
Our team would like to thank you for finding vulnerability on our website.
@kitcert     14 October, 2021
    Twitter kitcert:
KIT-CERT would like to thank Tanzil Khan for responsibly disclosing an XSS-Vulnerability on one of our departments websites and offering the time required to fix the issue!
@diogenesverlag     13 October, 2021
    Twitter diogenesverlag:
Thanks a lot for reporting this bug and thus making our site more secure.
@showmypc     11 October, 2021
    Twitter showmypc:
Thanks for your reporting and making our platform secure. We appreciate your work!