Disclaimer: This report reflects the submitter's account. It has not been independently verified unless marked Verified. The company may dispute this claim.
Scam Alert: core.hivelocity.net — Hivelocity Bug Bounty Unauthenticated SSRF (CVSS 9.1) Denied After 2 months, Vendor Acknowledged Vulnerability Exists
Company / Program: core.hivelocity.net
Platform: Self-Hosted · Severity: critical · Scam type: no-payout
Published:
Reported by: InkaBAAP
This whole fucking bug bounty is a pure scam. Two full months of getting used like a brain-dead cunt, and these motherfuckers finally open their filthy mouths to say the report is invalid. We already knew SSRF isn’t some world-ending threat? First these pieces of shit themselves reject it because internal systems are getting hit through the SSRF that’s the real reason they denied it. Then I shoved a solid argument down their throats, they quietly fix the hole, and suddenly it’s “not a threat.” What the fuck kind of two-faced, hypocritical garbage is this?
Don’t waste even one more second of your life on this dogshit program. These scammer programs only exist to farm retards. The entire company is a pack of motherfuckers. If these cocksuckers were standing in front of me I’d stomp their faces in and rip their asses wide open.