From vj.jain2704@gmail.com Fri Jan 23 05:45:53 2026 Return-path: Envelope-to: peter@bsdly.net Delivery-date: Fri, 23 Jan 2026 05:45:53 +0100 Received: from geekbay.nuug.no ([158.36.191.213]) by skapet.bsdly.net with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384 (Exim 4.98.2) (envelope-from ) id 1vj93P-00000000LgG-4BPw for peter@bsdly.net; Fri, 23 Jan 2026 05:45:53 +0100 Received: by geekbay.nuug.no (Postfix) id 4022B9FCD1; Fri, 23 Jan 2026 05:45:51 +0100 (CET) Delivered-To: drift@nuug.no Received: from portal.nuug.no (portal.nuug.no [158.36.191.225]) (using TLSv1.3 with cipher TLS_CHACHA20_POLY1305_SHA256 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA512) (No client certificate requested) by geekbay.nuug.no (Postfix) with ESMTPS id 370019FCCF for ; Fri, 23 Jan 2026 05:45:51 +0100 (CET) Received: from mail-yx1-f41.google.com ([74.125.224.41]) by portal.nuug.no with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256 (Exim 4.98.2) (envelope-from ) id 1vj93N-00000000EUc-21Rm for drift@nuug.no; Fri, 23 Jan 2026 05:45:50 +0100 Received: by mail-yx1-f41.google.com with SMTP id 956f58d0204a3-649523de977so1488533d50.0 for ; Thu, 22 Jan 2026 20:45:49 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1769143548; cv=none; d=google.com; s=arc-20240605; b=gGAIthuYV6/vkMBzTWNqfx+aIVO9ORhG5vtco+yK/ZtGK6NXjJfU+WEoZqK7m9loq2 H/rDwspYf4skndNQj/abSR77WzMv+jz/cS75uNo2sbruscqRcS0I92L8Sd8tZ9NVMRXP 1aXPCmYoJYGwfLjAHUf78NcCQ0IevCT0VyO9RaPExLxOYQYsVDVduu/uyy7PsZMS7SXn GdEHnRKdPPHUi5/kk7GyqOYY99GBDcYA6xeu4y9fSsSBJ6YPAKp9A9nz1FUuXSWRuQI2 5yuXo/ommRYH+k8Zi5J96Hss66xDBZ+iby3WhRUmf2kEgcD9wt2ouVWggmsRFlBaBzTo whUA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=to:subject:message-id:date:from:mime-version:dkim-signature; bh=BpXod6svOq56I1W2MuOGpwmxe08P7038GG8dtU6XewE=; fh=F3zlwNrEMnMky651v5yjOm3uTCSLQgxPXxo5/AuPITA=; b=Ceva8yp5gJs9Y0pB87H8XNh2MpLgm+MNAsOJlwkBKwNY1gOjcB/Blo5Chztnes9Mhs BszxYpMRR+MZWmtXFgk8MxkyVXwLwZ1kGO4U/qcu5mn0lyB0nmj4cqCz7hdr2QiEfsy0 B5yoh4oC11K2BBeQIM47FsjkXArP5aMu8Z+XetV0wGbEGZxi5e9n2DlYaIxwdCGxHswS wO9xoVLI6cX3GlTdq91cUMuiMFzuiRdrJXBhqqwG084SB/8umXHkVng+42LFCxmhEvUf vRaEpJEtI8lpN8Jnd6CMOg50rfXyZs2+lC5oYjvXVDlcAfk1oza+lHFHB4RchJoJ1eKA fmmQ==; darn=nuug.no ARC-Authentication-Results: i=1; mx.google.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1769143548; x=1769748348; darn=nuug.no; h=to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=BpXod6svOq56I1W2MuOGpwmxe08P7038GG8dtU6XewE=; b=VxkXBGJs8/INIyddbIsnSxICxeb8jWUYyGsQ59nes6gi1DGjTud5UQEhUo7hyvGlCH fmcCtmg8AGcBwVduXHFExA9QeQdWlTOoVWboyjjQeo3S9YMYVXCFFYQ0w8eRa4j41viQ I3dpB80VoHSB8uFQ+4BpyWXvkngyVx3O1eb9/0pTw1YKZ5mOJWKvxlmXam++kS6mMMef yQwUbL72gaTStiDrxoS2kV0eXFb81m/ZgjCC2OCDtL3ipHgpH3Ao2vIYSIiqM6OCgG0L oiEuB/YfGdm9jD49XF7MT8Dox4QpjT/kGsa5v1yjFGSZFF6g06Ob1fB0w8ZsNIcxUurD sWZw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1769143548; x=1769748348; h=to:subject:message-id:date:from:mime-version:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=BpXod6svOq56I1W2MuOGpwmxe08P7038GG8dtU6XewE=; b=r6EBijd+h2S5+DiHIYkN9kuyNt2tF2RoBJWym6RSTaVArWLLPQAXGxBAzhxlYZbcHq fMaJDgkvAyU8LHFZmxZwYAsC2ufrFfAUQCbQuISHWTsoEygsFF16TQMLjgxQbODWtu5x +Z9JvtsLOluSBPG0/IFjOf7QLK3ARWsnsQhWhSFxbB4Zx4tTE1kmbNvYJwoWnOO6Wg76 RU23RrKQXyvErYgdSRXG2JgtiKewMMEAYGAV/H4HYfA4VG7fA6CxZXWXiLyLKHl7yE5h +TlY/bUczXajHu6Eu3zBiJ59XYvUmYNwPZfBeh9sGLrf6cVIh8b+Wte7Hm+vb2cNx0mk 6Bsw== X-Forwarded-Encrypted: i=1; AJvYcCXAMkSGqsL/lRRXddfxH521DnFAJHLUh8ITMmhLWwTVS6MxegCzrEuOyftuVd4tK9qnFICCIA==@nuug.no X-Gm-Message-State: AOJu0YzxzlmrA6UoKbFCoyXR123OGnodKut1pxqG74AU6J9BQQ8Dew6l RvVAYSGNsF0z+uVfuPGyf1EmK/z+hrtEx2sAjqLgIYMmGPbT6MH7DJgN/gOTAH0jXt1OPIxoJZO xZrDyRKAnwyelqbMpSdcJbBYKAJXJn2Q= X-Gm-Gg: AZuq6aJ/3hkyhhqoJXN+DErF1IVhEqaCD8aU1o6awEX85K9NgC6fufK4u2dmBy31NKy EdjeQlVVy7ov3UCu2G0wRuGZJMIxZgmu6rkkwadjO7cpVOkXp2GwRjSeTln4wFhNV1rcdO6cywO bjzh6SUaFU8HyqLbWHXkNqfMVva5UwPE4htPCrcApPmsxUwbACdr1LF8y4Wt/9RAXm0IYfSMqx1 /zo6Xf/M6knZsGi322edfzeeFj3Cx9GIjOaU4MDSs/wspovc4OSa42+HSsEgCJJsi3q3GI7Uqwg jXUM21jmj1cSfqvh+jA5ClpyrorB9eQKqg== X-Received: by 2002:a05:690e:189a:b0:645:5467:29f3 with SMTP id 956f58d0204a3-6495bee7682mr1544328d50.39.1769143547954; Thu, 22 Jan 2026 20:45:47 -0800 (PST) MIME-Version: 1.0 From: vaibhav jain Date: Fri, 23 Jan 2026 10:15:36 +0530 X-Gm-Features: AZwV_QgdPNrPOOvOazqmDrW1YwQji8TYbG4Xf1bMXB1Ki78fjEJR8UV-IqZrhgs Message-ID: Subject: Responsible security disclosure To: Undisclosed Recipients Content-Type: multipart/alternative; boundary="000000000000bb8a5f064906d4a4" Status: RO Content-Length: 1349 Lines: 37 --000000000000bb8a5f064906d4a4 Content-Type: text/plain; charset="UTF-8" Dear Security Team, My name is Vaibhav Jain, and I am a security researcher. I have identified a potential vulnerability on your website and would like to responsibly disclose it. Before proceeding, I would like to confirm: Is this the correct email for reporting security vulnerabilities? Is your bug bounty program currently active, or has it been discontinued? Do you offer monetary rewards, or is the recognition limited to site credit and swag? I look forward to your response. Best regards, Vaibhav Jain --000000000000bb8a5f064906d4a4 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Dear =C2=A0Security Team,

My name is Vaibhav Jain, = and I am a security researcher. I have identified a potential vulnerability= on your website and would like to responsibly disclose it.

Before p= roceeding, I would like to confirm:

Is this the correct email for re= porting security vulnerabilities?

Is your bug bounty program current= ly active, or has it been discontinued?

Do you offer monetary reward= s, or is the recognition limited to site credit and swag?

I look for= ward to your response.

Best regards,
Vaibhav Jain
--000000000000bb8a5f064906d4a4--