UzHackHub
Log InSign Up

Responsible Disclosure

We want to know about security issues in the UzHackHub platform itself, reported safely. If you find something, this page explains what to report, how to report it and what you can expect from us.

What to report

  1. Bugs that could harm users, such as XSS or broken authentication.
  2. Data exposure, including unintended access to other members' data.
  3. Rate-limit bypasses on our platform.
  4. Content abuses, such as posts that break our community rules.

How to report

  1. Message the moderators on Telegram with a concise description of the issue.
  2. Include steps to reproduce the issue and its impact.
  3. Do not exploit the issue further than needed to confirm it.
  4. Do not share the issue publicly before we have fixed it.

What we promise

  1. We respond to every report.
  2. We keep reporters informed as we investigate and fix issues.
  3. We credit researchers in our changelog when we fix their findings.

Out of scope

  1. Testing other websites or systems is not part of this policy.
  2. This policy covers the UzHackHub platform only.

If you are unsure whether testing is allowed - it is not, until you ask.

Asking first is always welcome and never penalized.

Report an issue