Program Removed
This program is no longer available on Bugcrowd. The scope data shown below is historical and may not reflect the final state of the program.
Vulnerability Disclosure Program (VDP)
VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.
coles-vdp-pro
50
In Scope
28
Out of Scope
In-Scope Assets (50)
Out-of-Scope Assets (28)
| Asset | Category | Bounty | |
|---|---|---|---|
| https://apps.apple.com/au/app/coles/id529118855 | IOS | No | |
| https://apps.apple.com/au/app/coles/id529118855 | IOS | No | |
| https://coles.com.au/coles-express | URL | No | |
| https://coles.com.au/coles-express | URL | No | |
| https://coles.com.au/credit-cards | URL | No | |
| https://coles.com.au/credit-cards | URL | No | |
| https://coles.com.au/insurance | URL | No | |
| https://coles.com.au/insurance | URL | No | |
| https://coles.com.au/personal-loans | URL | No | |
| https://coles.com.au/personal-loans | URL | No | |
| https://play.google.com/store/apps/details?id=com.coles.android.shopmate&hl=en_AU | ANDROID | No | |
| https://play.google.com/store/apps/details?id=com.coles.android.shopmate&hl=en_au | ANDROID | No | |
| https://secure.coles.com.au | URL | No | |
| https://secure.coles.com.au | URL | No | |
| payments | OTHER | No | |
| payments | OTHER | No | |
| ████████ | OTHER | No | |
| ████████ | OTHER | No | |
| █████████████████████ | IOS | No | |
| █████████████████████ | IOS | No | |
| █████████████████████████ | ANDROID | No | |
| █████████████████████████ | ANDROID | No | |
| ███████████████████████████ | URL | No | |
| ███████████████████████████ | URL | No | |
| █████████████████████████████████ | URL | No | |
| █████████████████████████████████ | URL | No | |
| ███████████████████████████████████ | URL | No | |
| ███████████████████████████████████ | URL | No |
Scope Changes (206)
Jun 26, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Program Removed | — | — | — | 06:34 |
Jun 23, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | █████████████████████ | IOS | Out of Scope | 11:35 |
| Added | █████████████████████████ | ANDROID | Out of Scope | 11:35 |
| Removed | https://www.firstchoiceliquor.com.au/ | URL | In Scope | 11:35 |
| Removed | https://theliquorcabinet.liquorland.com.au/ | URL | In Scope | 11:35 |
| Removed | https://cdn.productimages.coles.com.au | URL | In Scope | 11:35 |
| Removed | https://productscdnprodb5fc14.blob.core.windows.net | URL | In Scope | 11:35 |
| Removed | https://svt2apigw.cmltd.net.au/digital/search/v1 | URL | In Scope | 11:35 |
| Removed | https://prod1apiportal.cmltd.net.au/api-details#api=CUSPGraphQLAPI-v1 | URL | In Scope | 11:35 |
| Removed | https://coles.com.au/insurance | URL | Out of Scope | 11:35 |
| Removed | https://coles.com.au/personal-loans | URL | Out of Scope | 11:35 |
| Removed | https://cellarpress.vintagecellars.com.au/ | URL | In Scope | 11:35 |
| Removed | https://apps.apple.com/au/app/coles/id529118855 | IOS | Out of Scope | 11:35 |
| Removed | https://www.coles.com.au | URL | In Scope | 11:35 |
| Removed | https://www.colesliquorcorporate.com.au/ | URL | In Scope | 11:35 |
| Removed | https://themarket.firstchoiceliquor.com.au/ | URL | In Scope | 11:35 |
| Removed | https://www.liquorconnection.com.au/ | URL | In Scope | 11:35 |
| Removed | https://coles.com.au/credit-cards | URL | Out of Scope | 11:35 |
| Removed | https://play.google.com/store/apps/details?id=com.coles.android.shopmate&hl=en_AU | ANDROID | Out of Scope | 11:35 |
| Removed | https://www.liquorland.com.au/ | URL | In Scope | 11:35 |
| Removed | payments | OTHER | Out of Scope | 11:35 |
| Removed | https://coles.com.au/coles-express | URL | Out of Scope | 11:35 |
| Removed | https://secure.coles.com.au | URL | Out of Scope | 11:35 |
| Removed | https://www.vintagecellars.com.au/ | URL | In Scope | 11:35 |
| Added | ████████████████████████ | URL | In Scope | 11:35 |
| Added | ██████████████████████████████ | URL | In Scope | 11:35 |
| Added | █████████████████████████████████████ | URL | In Scope | 11:35 |
| Added | ████████████████████████████████████████ | URL | In Scope | 11:35 |
| Added | ██████████████████████████████████████ | URL | In Scope | 11:35 |
| Added | ███████████████████████████████████████████████████ | URL | In Scope | 11:35 |
| Added | █████████████████████████ | ANDROID | Out of Scope | 11:35 |
| Added | ██████████████████████████████████████████ | URL | In Scope | 11:35 |
| Added | █████████████████████████████████████████████████████████████████████ | URL | In Scope | 11:35 |
| Added | ███████████████████████████████████ | URL | Out of Scope | 11:35 |
| Added | █████████████████████████████████████████████████ | URL | In Scope | 11:35 |
| Added | ███████████████████████████ | URL | Out of Scope | 11:35 |
| Added | ██████████████████████████████████ | URL | In Scope | 11:35 |
| Added | ███████████████████████████████████████████ | URL | In Scope | 11:35 |
| Added | ████████████████████████████████████ | URL | In Scope | 11:35 |
| Added | ████████ | OTHER | Out of Scope | 11:35 |
| Added | █████████████████████████████████ | URL | Out of Scope | 11:35 |
| Added | █████████████████████ | IOS | Out of Scope | 11:35 |
| Added | ████████████████████████ | URL | In Scope | 11:35 |
| Added | ██████████████████████████████ | URL | In Scope | 11:35 |
| Added | ██████████████████████████████████ | URL | In Scope | 11:35 |
| Added | █████████████████████████████████████ | URL | In Scope | 11:35 |
| Added | ████████████████████████████████████████ | URL | In Scope | 11:35 |
| Added | ███████████████████████████████████████████ | URL | In Scope | 11:35 |
| Added | ██████████████████████████████████████████ | URL | In Scope | 11:35 |
| Added | ██████████████████████████████████████ | URL | In Scope | 11:35 |
| Added | ███████████████████████████████████████████████████ | URL | In Scope | 11:35 |
| Added | █████████████████████████████████████████████████████████████████████ | URL | In Scope | 11:35 |
| Added | █████████████████████████████████████████████████ | URL | In Scope | 11:35 |
| Added | ████████████████████████████████████ | URL | In Scope | 11:35 |
| Added | ████████ | OTHER | Out of Scope | 11:35 |
| Added | █████████████████████████████████ | URL | Out of Scope | 11:35 |
| Added | ███████████████████████████ | URL | Out of Scope | 11:35 |
| Added | ███████████████████████████████████ | URL | Out of Scope | 11:35 |
Jun 17, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | https://www.liquorland.com.au/ | URL | In Scope | 11:35 |
| Added | https://www.coles.com.au | URL | In Scope | 11:35 |
| Added | https://www.liquorland.com.au/ | URL | In Scope | 11:35 |
| Added | https://www.vintagecellars.com.au/ | URL | In Scope | 11:35 |
| Added | https://www.firstchoiceliquor.com.au/ | URL | In Scope | 11:35 |
| Added | https://www.colesliquorcorporate.com.au/ | URL | In Scope | 11:35 |
| Added | https://theliquorcabinet.liquorland.com.au/ | URL | In Scope | 11:35 |
| Added | https://themarket.firstchoiceliquor.com.au/ | URL | In Scope | 11:35 |
| Added | https://cellarpress.vintagecellars.com.au/ | URL | In Scope | 11:35 |
| Added | https://cdn.productimages.coles.com.au | URL | In Scope | 11:35 |
| Added | https://productscdnprodb5fc14.blob.core.windows.net | URL | In Scope | 11:35 |
| Added | https://prod1apiportal.cmltd.net.au/api-details#api=CUSPGraphQLAPI-v1 | URL | In Scope | 11:35 |
| Added | https://svt2apigw.cmltd.net.au/digital/search/v1 | URL | In Scope | 11:35 |
| Added | https://www.liquorconnection.com.au/ | URL | In Scope | 11:35 |
| Added | payments | OTHER | Out of Scope | 11:35 |
| Added | https://coles.com.au/insurance | URL | Out of Scope | 11:35 |
| Added | https://coles.com.au/credit-cards | URL | Out of Scope | 11:35 |
| Added | https://coles.com.au/personal-loans | URL | Out of Scope | 11:35 |
| Added | https://coles.com.au/coles-express | URL | Out of Scope | 11:35 |
| Added | https://secure.coles.com.au | URL | Out of Scope | 11:35 |
| Added | https://apps.apple.com/au/app/coles/id529118855 | IOS | Out of Scope | 11:35 |
| Added | https://play.google.com/store/apps/details?id=com.coles.android.shopmate&hl=en_AU | ANDROID | Out of Scope | 11:35 |
| Added | https://www.coles.com.au | URL | In Scope | 11:35 |
| Added | https://www.firstchoiceliquor.com.au/ | URL | In Scope | 11:35 |
| Added | https://themarket.firstchoiceliquor.com.au/ | URL | In Scope | 11:35 |
| Added | payments | OTHER | Out of Scope | 11:35 |
| Added | https://coles.com.au/insurance | URL | Out of Scope | 11:35 |
| Added | https://coles.com.au/personal-loans | URL | Out of Scope | 11:35 |
| Added | https://www.vintagecellars.com.au/ | URL | In Scope | 11:35 |
| Added | https://cdn.productimages.coles.com.au | URL | In Scope | 11:35 |
| Added | https://productscdnprodb5fc14.blob.core.windows.net | URL | In Scope | 11:35 |
| Added | https://www.liquorconnection.com.au/ | URL | In Scope | 11:35 |
| Added | https://coles.com.au/coles-express | URL | Out of Scope | 11:35 |
| Added | https://apps.apple.com/au/app/coles/id529118855 | IOS | Out of Scope | 11:35 |
| Added | https://theliquorcabinet.liquorland.com.au/ | URL | In Scope | 11:35 |
| Added | https://cellarpress.vintagecellars.com.au/ | URL | In Scope | 11:35 |
| Added | https://prod1apiportal.cmltd.net.au/api-details#api=CUSPGraphQLAPI-v1 | URL | In Scope | 11:35 |
| Added | https://svt2apigw.cmltd.net.au/digital/search/v1 | URL | In Scope | 11:35 |
| Added | https://secure.coles.com.au | URL | Out of Scope | 11:35 |
| Added | https://play.google.com/store/apps/details?id=com.coles.android.shopmate&hl=en_AU | ANDROID | Out of Scope | 11:35 |
| Added | https://www.colesliquorcorporate.com.au/ | URL | In Scope | 11:35 |
| Added | https://coles.com.au/credit-cards | URL | Out of Scope | 11:35 |
| Program Removed | — | — | — | 10:34 |
Mar 5, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | https://coles.com.au/personal-loans | URL | Out of Scope | 22:32 |
| Added | https://www.coles.com.au | URL | In Scope | 22:32 |
| Added | https://www.liquorland.com.au/ | URL | In Scope | 22:32 |
| Added | https://www.vintagecellars.com.au/ | URL | In Scope | 22:32 |
| Added | https://www.firstchoiceliquor.com.au/ | URL | In Scope | 22:32 |
| Added | https://www.colesliquorcorporate.com.au/ | URL | In Scope | 22:32 |
| Added | https://theliquorcabinet.liquorland.com.au/ | URL | In Scope | 22:32 |
| Added | https://themarket.firstchoiceliquor.com.au/ | URL | In Scope | 22:32 |
| Added | https://cellarpress.vintagecellars.com.au/ | URL | In Scope | 22:32 |
| Added | https://cdn.productimages.coles.com.au | URL | In Scope | 22:32 |
| Added | https://productscdnprodb5fc14.blob.core.windows.net | URL | In Scope | 22:32 |
| Added | https://prod1apiportal.cmltd.net.au/api-details#api=CUSPGraphQLAPI-v1 | URL | In Scope | 22:32 |
| Added | https://svt2apigw.cmltd.net.au/digital/search/v1 | URL | In Scope | 22:32 |
| Added | https://www.liquorconnection.com.au/ | URL | In Scope | 22:32 |
| Added | payments | OTHER | Out of Scope | 22:32 |
| Added | https://coles.com.au/insurance | URL | Out of Scope | 22:32 |
| Added | https://coles.com.au/credit-cards | URL | Out of Scope | 22:32 |
| Added | https://coles.com.au/coles-express | URL | Out of Scope | 22:32 |
| Added | https://secure.coles.com.au | URL | Out of Scope | 22:32 |
| Added | https://apps.apple.com/au/app/coles/id529118855 | IOS | Out of Scope | 22:32 |
| Added | https://play.google.com/store/apps/details?id=com.coles.android.shopmate&hl=en_AU | ANDROID | Out of Scope | 22:32 |
| Added | https://www.coles.com.au | URL | In Scope | 22:32 |
| Added | https://www.vintagecellars.com.au/ | URL | In Scope | 22:32 |
| Added | https://www.firstchoiceliquor.com.au/ | URL | In Scope | 22:32 |
| Added | https://cellarpress.vintagecellars.com.au/ | URL | In Scope | 22:32 |
| Added | https://svt2apigw.cmltd.net.au/digital/search/v1 | URL | In Scope | 22:32 |
| Added | https://apps.apple.com/au/app/coles/id529118855 | IOS | Out of Scope | 22:32 |
| Added | https://theliquorcabinet.liquorland.com.au/ | URL | In Scope | 22:32 |
| Added | https://cdn.productimages.coles.com.au | URL | In Scope | 22:32 |
| Added | https://prod1apiportal.cmltd.net.au/api-details#api=CUSPGraphQLAPI-v1 | URL | In Scope | 22:32 |
| Added | https://www.liquorconnection.com.au/ | URL | In Scope | 22:32 |
| Added | payments | OTHER | Out of Scope | 22:32 |
| Added | https://www.liquorland.com.au/ | URL | In Scope | 22:32 |
| Added | https://themarket.firstchoiceliquor.com.au/ | URL | In Scope | 22:32 |
| Added | https://coles.com.au/insurance | URL | Out of Scope | 22:32 |
| Added | https://coles.com.au/credit-cards | URL | Out of Scope | 22:32 |
| Added | https://www.colesliquorcorporate.com.au/ | URL | In Scope | 22:32 |
| Added | https://productscdnprodb5fc14.blob.core.windows.net | URL | In Scope | 22:32 |
| Added | https://coles.com.au/personal-loans | URL | Out of Scope | 22:32 |
| Added | https://coles.com.au/coles-express | URL | Out of Scope | 22:32 |
| Added | https://secure.coles.com.au | URL | Out of Scope | 22:32 |
| Added | https://play.google.com/store/apps/details?id=com.coles.android.shopmate&hl=en_AU | ANDROID | Out of Scope | 22:32 |
Feb 25, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | https://coles.com.au/personal-loans | URL | Out of Scope | 19:15 |
| Added | https://apps.apple.com/au/app/coles/id529118855 | IOS | Out of Scope | 19:15 |
| Added | https://www.liquorland.com.au/ | URL | In Scope | 19:15 |
| Added | https://www.vintagecellars.com.au/ | URL | In Scope | 19:15 |
| Added | https://www.colesliquorcorporate.com.au/ | URL | In Scope | 19:15 |
| Added | https://coles.com.au/insurance | URL | Out of Scope | 19:15 |
| Added | https://coles.com.au/credit-cards | URL | Out of Scope | 19:15 |
| Added | https://coles.com.au/coles-express | URL | Out of Scope | 19:15 |
| Added | https://secure.coles.com.au | URL | Out of Scope | 19:15 |
| Added | https://play.google.com/store/apps/details?id=com.coles.android.shopmate&hl=en_AU | ANDROID | Out of Scope | 19:15 |
| Added | https://theliquorcabinet.liquorland.com.au/ | URL | In Scope | 19:15 |
| Added | https://cellarpress.vintagecellars.com.au/ | URL | In Scope | 19:15 |
| Added | https://cdn.productimages.coles.com.au | URL | In Scope | 19:15 |
| Added | https://productscdnprodb5fc14.blob.core.windows.net | URL | In Scope | 19:15 |
| Added | https://prod1apiportal.cmltd.net.au/api-details#api=CUSPGraphQLAPI-v1 | URL | In Scope | 19:15 |
| Added | https://www.coles.com.au | URL | In Scope | 19:15 |
| Added | https://www.firstchoiceliquor.com.au/ | URL | In Scope | 19:15 |
| Added | https://svt2apigw.cmltd.net.au/digital/search/v1 | URL | In Scope | 19:15 |
| Added | payments | OTHER | Out of Scope | 19:15 |
| Added | https://themarket.firstchoiceliquor.com.au/ | URL | In Scope | 19:15 |
| Added | https://www.liquorconnection.com.au/ | URL | In Scope | 19:15 |
| Added | https://www.vintagecellars.com.au/ | URL | In Scope | 17:15 |
| Added | https://www.liquorconnection.com.au/ | URL | In Scope | 17:15 |
| Added | https://coles.com.au/credit-cards | URL | Out of Scope | 17:15 |
| Added | https://play.google.com/store/apps/details?id=com.coles.android.shopmate&hl=en_AU | ANDROID | Out of Scope | 17:15 |
| Added | https://themarket.firstchoiceliquor.com.au/ | URL | In Scope | 17:15 |
| Added | https://cellarpress.vintagecellars.com.au/ | URL | In Scope | 17:15 |
| Added | https://cdn.productimages.coles.com.au | URL | In Scope | 17:15 |
| Added | https://productscdnprodb5fc14.blob.core.windows.net | URL | In Scope | 17:15 |
| Added | https://svt2apigw.cmltd.net.au/digital/search/v1 | URL | In Scope | 17:15 |
| Added | payments | OTHER | Out of Scope | 17:15 |
| Added | https://coles.com.au/insurance | URL | Out of Scope | 17:15 |
| Added | https://coles.com.au/coles-express | URL | Out of Scope | 17:15 |
| Added | https://www.liquorland.com.au/ | URL | In Scope | 17:15 |
| Added | https://www.firstchoiceliquor.com.au/ | URL | In Scope | 17:15 |
| Added | https://www.colesliquorcorporate.com.au/ | URL | In Scope | 17:15 |
| Added | https://coles.com.au/personal-loans | URL | Out of Scope | 17:15 |
| Added | https://secure.coles.com.au | URL | Out of Scope | 17:15 |
| Added | https://www.coles.com.au | URL | In Scope | 17:15 |
| Added | https://www.coles.com.au | URL | In Scope | 17:15 |
| Added | https://theliquorcabinet.liquorland.com.au/ | URL | In Scope | 17:15 |
| Added | https://prod1apiportal.cmltd.net.au/api-details#api=CUSPGraphQLAPI-v1 | URL | In Scope | 17:15 |
| Added | https://apps.apple.com/au/app/coles/id529118855 | IOS | Out of Scope | 17:15 |
| Added | https://www.liquorland.com.au/ | URL | In Scope | 17:15 |
| Added | https://www.vintagecellars.com.au/ | URL | In Scope | 17:15 |
| Added | https://www.firstchoiceliquor.com.au/ | URL | In Scope | 17:15 |
| Added | https://www.colesliquorcorporate.com.au/ | URL | In Scope | 17:15 |
| Added | https://theliquorcabinet.liquorland.com.au/ | URL | In Scope | 17:15 |
| Added | https://themarket.firstchoiceliquor.com.au/ | URL | In Scope | 17:15 |
| Added | https://cellarpress.vintagecellars.com.au/ | URL | In Scope | 17:15 |
| Added | https://cdn.productimages.coles.com.au | URL | In Scope | 17:15 |
| Added | https://productscdnprodb5fc14.blob.core.windows.net | URL | In Scope | 17:15 |
| Added | https://prod1apiportal.cmltd.net.au/api-details#api=CUSPGraphQLAPI-v1 | URL | In Scope | 17:15 |
| Added | https://svt2apigw.cmltd.net.au/digital/search/v1 | URL | In Scope | 17:15 |
| Added | https://www.liquorconnection.com.au/ | URL | In Scope | 17:15 |
| Added | payments | OTHER | Out of Scope | 17:15 |
| Added | https://coles.com.au/insurance | URL | Out of Scope | 17:15 |
| Added | https://coles.com.au/credit-cards | URL | Out of Scope | 17:15 |
| Added | https://coles.com.au/personal-loans | URL | Out of Scope | 17:15 |
| Added | https://coles.com.au/coles-express | URL | Out of Scope | 17:15 |
| Added | https://secure.coles.com.au | URL | Out of Scope | 17:15 |
| Added | https://apps.apple.com/au/app/coles/id529118855 | IOS | Out of Scope | 17:15 |
| Added | https://play.google.com/store/apps/details?id=com.coles.android.shopmate&hl=en_AU | ANDROID | Out of Scope | 17:15 |