Vulnerability Disclosure Program (VDP)

VDP RECEPTOR: ACTIVEBOUNTY ENABLED · UP TO 2,000 CREDITSISO/IEC 29147 COMPLIANT

In-Scope Assets

22 Assets

Safe Harbor Protected

Good-faith research within program scope is legally protected under ISO/IEC 29147 coordinated disclosure.

Target:GANGA Webapp Platform (gangaoffensiveops.com.np)

Select any asset from the sidecard to auto-fill

Affected GANGA Product / Asset*

Vulnerability Category*

Report Title / Finding Summary*

Target Endpoint / Parameter / Component URL (Auto-Filled)

Critical9.0 - 10.0

Up to 2,000 Credits

Unauthenticated RCE, direct takeover, database extraction, complete bypass

High7.0 - 8.9

Up to 800 Credits

Privilege escalation, stored XSS, high-impact IDOR, auth token forgery

Medium4.0 - 6.9

Up to 300 Credits

Sensitive action CSRF, reflected XSS, information leakage, rate limit flaw

Low0.1 - 3.9

Up to 100 Credits

Verbose error disclosure, open redirect, UI glitch, non-sensitive bypass

Informative0.0

Hall of Fame

Defense-in-depth suggestions, security headers, best practice recommendations

CVSS v3.1 / v4.0 Score (Optional)

Step-by-Step Reproduction Steps & Payload PoC*

Security Impact & Threat Model*

Suggested Remediation / Defense Fix (Optional)

Researcher Handle / Name (For Hall of Fame Credit)

Contact Email (For Reward & Triage Notification)*

Vulnerability Disclosure Program (VDP)Vulnerability Disclosure Program (VDP)