Boozt Fashion AB bug bounty programs
boozt.com Updated
Boozt Fashion AB runs one public program: a HackerOne bug bounty paying up to $5,500.
- Top reward
- $5,500
- HackerOne
- Programs
- 1
- 1 pays cash
- Targets in scope
- 7
- 4 types
- Last change
- None yet
- Tracked since Nov 2026
Where to report
The one public program Boozt Fashion AB runs.
| Program | Critical | High | Medium | Low | Top reward | Safe harbor | KYC | First response | Status |
|---|---|---|---|---|---|---|---|---|---|
Boozt Fashion AB
HackerOne · Bug bounty |
$5,500 | $3,500 | $1,000 | $400 | $5,500 | Partial | – | 3 hours average | Open |
-
- Critical
- $5,500
- High
- $3,500
- Medium
- $1,000
- Low
- $400
- Safe harbor
- Partial
- First response
- 3 hours average
Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.
What is in scope
7 targets. 3 excluded.
-
*.boozt.com
Wildcards Critical
-
*.booztlet.com
Wildcards Critical
-
kronor.io
Web Critical
-
com.boozt
Android Critical
-
com.booztlet
Android Critical
-
com.boozt.app
iOS Critical
-
com.boozt.booztlet
iOS Critical
No target matches. Try part of a host name, such as the company name.
Out of scope 3
Don't test these. A program can exclude a host another program covers; the program you report to decides.
-
analytics.boozt.com
-
bmp.boozt.com
-
www.kronor.io
Recent changes
Reward and scope changes across every Boozt Fashion AB program, newest first.
No changes recorded yet. New targets and reward moves show up here and in the RSS feed.
Recent CVEs
Published vulnerabilities in Boozt Fashion AB products, from the NVD.
-
CVE-2017-11706 High
The Boozt Fashion application before 2.3.4 for Android allows remote attackers to read login credentials by sniffing the network and leveraging the lack of SSL. NOTE: the vendor response, before the application was changed to enable SSL logins, was "At the moment that is an accepted risk. We only have https on the checkout part of the site."
-
CVE-2002-0098 High
Buffer overflow in index.cgi administration interface for Boozt! Standard 0.9.8 allows local users to execute arbitrary code via a long name field when creating a new banner.
About this page
This page gathers every public program listed under boozt.com: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.
Something wrong or missing? Report a correction.