Hello HN!<p>I believe I have found a pretty serious bug in a United Arab Emirates government website that let's you receive passport and other information of residents.<p>I have no intention of selling this to untrustworthy parties, but also don't want to just give the bug away since I hope to get some $ for it.<p>So far I have only found https://bugbounty.ae and they told me I can just share a bug with them, but I won't get any rewards since there are no public programs for it.<p>What would you do if you were in my shoes?