باگ گزارش کن!

Self XSS

Internal open redirect

Brute Forcing accounts

DOS/DDOS attacks

Vulnerabilities related to rate limit are considered outside the scope of bug bounty until they lead to a vulnerability with a higher degree of importance.

Social engineering attacks

Physical attacks or exploits

Vulnerabilities on third-party websites or applications

Vulnerabilities already reported by others

Vulnerabilities requiring physical access to devices

Spam or phishing vulnerabilities

Clickjacking without evidence of a vulnerability

Issues related to outdated or unsupported browsers/clients

Email spoofing

lack of security headers

Issues related to insecure SSL/TLS cipher suites or protocols

SSRF (DNS Query Only)

Open Redirect (POST-Based)

Captcha brute force

Exposed Admin Portal To Internet

Public Admin Login Page

Deprecated Open Source libraries

Publicly available leaked credentials (e.g., database dumps) found online

Theoretical vulnerabilities without proof of concept

Output from automated tools/scanners or AI-generated reports

Issues without security impact

Missing best practices (e.g., lack of input validation) without impact

Disclosure of non-sensitive public information