bug bounty report explain