VNTRIP

• This program will stop receiving reports from now

• Description was changed

 - Submit any necessary screenshots, screen captures, network requests, reproduction steps or similar using the WhiteHub submission form (you can use third party file sharing sites but you have to make sure they are not disclosed to anyone other than us).
 - When investigating a vulnerability, please only target your own account and do not attempt to access data from anyone else’s account.
 - **All reports must be written in English.**
+- Use email **[email protected]** while making orders.

 
 
 ## Qualifying vulnerabilities

• In-scope targets were changed to:

  • *.vntrip.vn - website
  • Vntrip Android app - android
  • Vntrip IOS app - ios

• Out-of-scope targets were changed to:

  • test-*.vntrip.vn - website

• Rewards were changed:
  • Severity CRITICAL - Rewards money (1,500,000 - 2,500,000 VND) and points
  • Severity HIGH - Rewards money (1,000,000 - 1,500,000 VND) and points
  • Severity MEDIUM - Rewards points only
  • Severity LOW - Rewards points only
  • Severity INFORMATION - Rewards points only

• Description was changed

 - Collect only the information necessary to demonstrate the vulnerability.
 - Submit any necessary screenshots, screen captures, network requests, reproduction steps or similar using the WhiteHub submission form (you can use third party file sharing sites but you have to make sure they are not disclosed to anyone other than us).
 - When investigating a vulnerability, please only target your own account and do not attempt to access data from anyone else’s account.
-- Write vulnerability reports in English.

+- **All reports must be written in English.**

 
 
 ## Qualifying vulnerabilities

• Description was changed

 - Collect only the information necessary to demonstrate the vulnerability.
 - Submit any necessary screenshots, screen captures, network requests, reproduction steps or similar using the WhiteHub submission form (you can use third party file sharing sites but you have to make sure they are not disclosed to anyone other than us).
 - When investigating a vulnerability, please only target your own account and do not attempt to access data from anyone else’s account.
+- Write vulnerability reports in English.

 
 
 ## Qualifying vulnerabilities

• Rewards were changed:
  • Severity CRITICAL - Rewards money (3,500,000 - 5,000,000 VND) and points
  • Severity HIGH - Rewards money (1,000,000 - 3,500,000 VND) and points
  • Severity MEDIUM - Rewards money (0 - 1,000,000 VND) and points
  • Severity LOW - Rewards money (0 - 500,000 VND) and points
  • Severity INFORMATION - Rewards points only