I believe I have found a pretty serious bug in a United Arab Emirates government website that let's you receive passport and other information of residents.
I have no intention of selling this to untrustworthy parties, but also don't want to just give the bug away since I hope to get some $ for it.
So far I have only found https://bugbounty.ae and they told me I can just share a bug with them, but I won't get any rewards since there are no public programs for it.
What would you do if you were in my shoes?
No comments yet.
