Vulnerability Disclosure Program (VDP)
VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.
donorbox/donorboxvdp
7
In Scope
0
Out of Scope
In-Scope Assets (7)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| https://apps.apple.com/us/app/donorbox-live/id1668808097 | IOS | No | - | |
| https://donorbox.org | URL | No | ||
| https://donorbox.org/admin | URL | No | ||
| https://donorbox.org/embed/potato | URL | No | ||
| https://donorbox.org/org_admin | URL | No | ||
| https://donorbox.org/potato | URL | No | ||
| https://play.google.com/store/apps/details?id=org.donorbox.cardreader&hl=en&gl=US | ANDROID | No |
Scope Changes (35)
Mar 11, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Removed | https://apps.apple.com/us/app/donorbox-live/id1668808097 | IOS | In Scope | 22:39 |
| Removed | https://donorbox.org/admin | URL | In Scope | 22:39 |
| Removed | https://play.google.com/store/apps/details?id=org.donorbox.cardreader&hl=en&gl=US | ANDROID | In Scope | 22:39 |
| Removed | https://donorbox.org | URL | In Scope | 22:39 |
| Removed | https://donorbox.org/embed/potato | URL | In Scope | 22:39 |
| Removed | https://donorbox.org/org_admin | URL | In Scope | 22:39 |
| Removed | https://donorbox.org/potato | URL | In Scope | 22:39 |
Feb 25, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | https://apps.apple.com/us/app/donorbox-live/id1668808097 | IOS | In Scope | 19:08 |
| Added | https://donorbox.org/admin | URL | In Scope | 19:08 |
| Added | https://play.google.com/store/apps/details?id=org.donorbox.cardreader&hl=en&gl=US | ANDROID | In Scope | 19:08 |
| Added | https://donorbox.org | URL | In Scope | 19:08 |
| Added | https://donorbox.org/embed/potato | URL | In Scope | 19:08 |
| Added | https://donorbox.org/org_admin | URL | In Scope | 19:08 |
| Added | https://donorbox.org/potato | URL | In Scope | 19:08 |
Feb 22, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | https://apps.apple.com/us/app/donorbox-live/id1668808097 | IOS | In Scope | 00:49 |
| Added | https://donorbox.org/admin | URL | In Scope | 00:49 |
| Added | https://play.google.com/store/apps/details?id=org.donorbox.cardreader&hl=en&gl=US | ANDROID | In Scope | 00:49 |
| Added | https://donorbox.org | URL | In Scope | 00:49 |
| Added | https://donorbox.org/embed/potato | URL | In Scope | 00:49 |
| Added | https://donorbox.org/org_admin | URL | In Scope | 00:49 |
| Added | https://donorbox.org/potato | URL | In Scope | 00:49 |
Feb 21, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Removed | https://apps.apple.com/us/app/donorbox-live/id1668808097 | IOS | In Scope | 21:40 |
| Removed | https://donorbox.org/admin | URL | In Scope | 21:40 |
| Removed | https://play.google.com/store/apps/details?id=org.donorbox.cardreader&hl=en&gl=US | ANDROID | In Scope | 21:40 |
| Removed | https://donorbox.org | URL | In Scope | 21:40 |
| Removed | https://donorbox.org/embed/potato | URL | In Scope | 21:40 |
| Removed | https://donorbox.org/org_admin | URL | In Scope | 21:40 |
| Removed | https://donorbox.org/potato | URL | In Scope | 21:40 |
| Added | https://apps.apple.com/us/app/donorbox-live/id1668808097 | IOS | In Scope | 18:51 |
| Added | https://donorbox.org/admin | URL | In Scope | 18:51 |
| Added | https://play.google.com/store/apps/details?id=org.donorbox.cardreader&hl=en&gl=US | ANDROID | In Scope | 18:51 |
| Added | https://donorbox.org | URL | In Scope | 18:51 |
| Added | https://donorbox.org/embed/potato | URL | In Scope | 18:51 |
| Added | https://donorbox.org/org_admin | URL | In Scope | 18:51 |
| Added | https://donorbox.org/potato | URL | In Scope | 18:51 |