OpenBugBounty.org > Bug Bounty List > Sussex 4x4 Response Bug Bounty Program

Sussex 4x4 Response Bug Bounty Program

Sussex 4x4 Response runs a bug bounty program to ensure the highest security and privacy of its websites. Everyone is eligible to participate in the program subject to the below-mentioned conditions and requirements of Sussex 4x4 Response

Open Bug Bounty performs triage and verification of the submissions. However, we never intervene to the further process of vulnerability remediation and disclosure between Sussex 4x4 Response and researchers.

Bug bounty program allow private and public submissions.

Bug Bounty Scope

The following websites are within the scope of the program:

sx4x4response.uk

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

- Cross Site Scripting (XSS)
- Open Redirect

- Cross Site Request Forgery (CSRF)
- Improper Access Control

General Requirements:

- Always send a Proof Of Concept inc details of browser platform/version used.
- Video / screenshots appreciated
- Expected steps to allow resolution are welcome to expedite the process
- We are not interested in the results of general scanning tools such as Owasp Zap, all reports must be high quality and provided in clear English

Testing Requirements:

Please contact before performing any active testing, we reserve the right to refuse testing at peak times to avoid disturbance to our community users
Will not accept social engineering attacks (we're all volunteers)
Will not accept automated bug reports which have not been proven
All results must be provided in clear English

Possible Awards:

We are a small charity who's volunteers provide emergency assistance using their personally owned 4x4 vehicles to help their local community including health service, police, environment agency in times of need.
By reporting genuine issues you are doing a good deed to the community we serve, you might be grateful of our help one day. Please don't waste our volunteers time

Special Notes:

None

Community Rating

Provided by security researchers who reported security vulnerabilities via this bug bounty program:

Researcher's comments

No comments so far.

Latest Patched

Recent Recommendations

22 April, 2024

genoverband:

Thank you for your invaluable help in ensuring the security of our domain and its visitors!

10 April, 2024

Mars:

Hatim uncovered a XSS bug that we were able to quickly resolve. Thanks very much for your assistance and help.

8 April, 2024

Panthermedia:

Thanks to the support of Hatim Chabik, we were able to identify and solve an XSS bug.

5 April, 2024

pubpharm:

Pooja found a XSS vulnerability on our website and provided us with the needed Information for replication and fixing the issue. Which she verified afterwards.
We thank her for the reporting and assistance.

2 April, 2024