u/Spirited-Cost4461

Hey everyone,

Been testing a program lately The scope page only excluded Contributor/Light Agent issues and Admin impersonating users via API tokens Agent-level privesc wasn't mentioned anywhere.

Submitted 6 reports escalating privileges from an Agent account 2 came back Informative 4 OOS.

Opened a "Request a response" to ask for clarification since it wasn't clearly excluded

Has anyone dealt with something similar? Is it even worth pushing back or should I just move on?

I was surprised today to find that my submission limit had been restricted, and I'm wondering if I only have one warning left. I don't submit AI-generated reports or poorly written reports. In my last 15 submissions, I had 2 valid vulnerabilities that were accepted and rewarded with bounties. The rest were duplicates of real vulnerabilities, and some of them even earned me reputation points because they were classified as P2.

Does this mean that my account is at risk of being banned?

guys i need help, been trying to create a navan company account for bug bounty testing (bugcrowd program) and its just not working

i followed the brief exactly, bought my own domain, went through the whole signup flow... and every single time i get this:

> Error: access_denied - Your login didn't match your company configuration

i literally bought 2 different domains thinking maybe the first one was the problem. same error both times lol

also tried basically every temp email service out there, one of them worked once (1 day) randomly and then never again, others just never worked at all from the start. no pattern i can figure out

contacted support like a week ago, nothing. no reply, no ticket update, just silence

has anyone dealt with this before? is there something i'm missing in the setup or is this just a known navan issue? really frustrated at this point, cant even get to testing