Bug Bounty Program

Help Us Improve: Reporting Bugs and Vulnerabilities

At Alive5, we acknowledge that even the best of us can make mistakes. That's why we welcome your assistance in identifying and reporting any bugs or vulnerabilities you come across. To report such issues, kindly send an email to security@alive5.com and provide the following details:

• A description of the identified vulnerability.
• A step-by-step guide on how to exploit the vulnerability.
• You MUST include your credentials: name and a link to your LinkedIn or HackerOne account.
  

These vulnerabilities may pose a challenge for exploitation, yet they still carry the potential for compromising resource confidentiality, integrity, or availability in specific situations.

These vulnerabilities, while possessing the potential for critical or high impact, are less susceptible to exploitation based on a technical assessment of the flaw, particularly when targeting unlikely configurations.

They exhibit vulnerability to external, straightforward, single-actor, logic-based attacks that can lead to measurable performance degradation in one or more critical systems or products.

Vulnerabilities capable of jeopardizing the confidentiality, integrity, or availability of both production and corporate resources and data.

Vulnerabilities susceptible to exploitation by internal and/or external attackers, whether authenticated or not, which can result in system compromise or exposure of highly sensitive customer data without user interaction.

Vulnerabilities that grant local users the ability to escalate their privileges.

Vulnerabilities that enable unauthenticated remote users to access sensitive information.

Predisposition to external, uncomplicated, single-actor, logic-based attacks leading to significant performance degradation in one or more critical systems or products.

Vulnerabilities with the potential to jeopardize the confidentiality, integrity, or availability of production and corporate resources or data, often with minimal exploitation complexity and attacker expertise.

Vulnerabilities susceptible to easy exploitation by remote or unauthenticated attackers, leading to system compromise or exposure of highly sensitive customer data, all without any user interaction.

Successful exploitation of a vulnerability that leads to a complete compromise of servers or infrastructure devices at the root level.