Scope Updates
Recent changes to bug bounty program scopes.
| Change | Asset | Category | Scope | Program | Platform | Time |
|---|---|---|---|---|---|---|
| Removed | https://app.bitrise.io/app/5bec038cb1e318cd/build/0e56ea84-4683-4ef6-8d3e-60eb0a012c25/artifact/cf0e6abc6528df88/p/85802412acd014f154decf14e4bb8c57 | IOS | In Scope | Bugcrowd | 2025-10-22 21:06 | |
| Removed | https://app.bitrise.io/app/5bec038cb1e318cd/build/e071d2ed-1b34-41d7-88ac-78d683fce9c7/artifact/4edf32abe1b497ea/p/2f6cacc3a3ca02df5fc194248bfb15b7 | ANDROID | In Scope | Bugcrowd | 2025-10-22 21:06 | |
+Program Added | — | — | — | Bugcrowd | 2025-10-22 20:37 | |
Associated Assets:URLhttps://indeed.com URL*.indeedflex.com URLhttps://apis.indeed.com/graphql ANDROIDhttps://play.google.com/store/apps/details?id=com.indeed.android.jobsearch IOShttps://apps.apple.com/us/app/indeed-job-search/id309735670 ANDROIDhttps://play.google.com/store/apps/details?id=com.syftapp.android IOShttps://apps.apple.com/gb/app/indeed-flex-job-search/id1013812731 URLcareer scout URL*.indeed.tech URL*.indeed.net URLhttps://resume.com URLhttps://wowjobs.ca IOShttps://apps.apple.com/us/app/%E5%B1%A5%E6%AD%B4%E6%9B%B8%E4%BD%9C%E6%88%90-%E3%82%A4%E3%83%B3%E3%83%87%E3%82%A3%E3%83%BC%E3%83%89/id1484451230 ANDROIDhttps://play.google.com/store/apps/details?id=com.indeed.resume IOShttps://apps.apple.com/us/app/indeed-connect-for-employers/id6443822731 URLhttps://chromewebstore.google.com/detail/indeed-recruiter-extensio/kiodpphbmnmcmnfgpnmkkhmkllnlflef OTHERany host/web property/mobile app verified to be owned by indeed | ||||||
+Program Removed | — | — | — | Bugcrowd | 2025-10-22 20:06 | |
Associated Assets:URLhttps://indeed.com URL*.indeedflex.com URLhttps://apis.indeed.com/graphql ANDROIDhttps://play.google.com/store/apps/details?id=com.indeed.android.jobsearch IOShttps://apps.apple.com/us/app/indeed-job-search/id309735670 ANDROIDhttps://play.google.com/store/apps/details?id=com.syftapp.android IOShttps://apps.apple.com/gb/app/indeed-flex-job-search/id1013812731 URLcareer scout URL*.indeed.tech URL*.indeed.net URLhttps://resume.com URLhttps://wowjobs.ca IOShttps://apps.apple.com/us/app/%E5%B1%A5%E6%AD%B4%E6%9B%B8%E4%BD%9C%E6%88%90-%E3%82%A4%E3%83%B3%E3%83%87%E3%82%A3%E3%83%BC%E3%83%89/id1484451230 ANDROIDhttps://play.google.com/store/apps/details?id=com.indeed.resume IOShttps://apps.apple.com/us/app/indeed-connect-for-employers/id6443822731 URLhttps://chromewebstore.google.com/detail/indeed-recruiter-extensio/kiodpphbmnmcmnfgpnmkkhmkllnlflef OTHERany host/web property/mobile app verified to be owned by indeed | ||||||
+Program Added | — | — | — | Bugcrowd | 2025-10-22 19:36 | |
Associated Assets:URLhttps://www.canva.com URLhttps://www.canva.com/developers OTHERapps sdk sandboxing URLhttps://api.canva.com URL*.canva.com URL*.canva-apps.com URL*.canva.tech URLhttps://www.canva.com/en_au/help/chatgpt-templates URLhttps://www.canva.com/integrations/slack OTHERcanva desktop (macos / windows) IOScanva (ios) ANDROIDcanva (android) OTHERcanva (chrome extension) URL*.canva.cn URL*.canva-apps.cn OTHERleaked credentials and secrets (canva employee/contractor) OTHERleaked credentials and secrets (canva user) OTHER3rd-party provider vulnerability | ||||||
+Program Removed | — | — | — | Bugcrowd | 2025-10-22 19:06 | |
Associated Assets:URLhttps://www.canva.com URLhttps://www.canva.com/developers OTHERapps sdk sandboxing URLhttps://api.canva.com URL*.canva.com URL*.canva-apps.com URL*.canva.tech URLhttps://www.canva.com/en_au/help/chatgpt-templates URLhttps://www.canva.com/integrations/slack OTHERcanva desktop (macos / windows) IOScanva (ios) ANDROIDcanva (android) OTHERcanva (chrome extension) URL*.canva.cn URL*.canva-apps.cn OTHERleaked credentials and secrets (canva employee/contractor) OTHERleaked credentials and secrets (canva user) OTHER3rd-party provider vulnerability | ||||||
| Removed | https://apigw.prod.quintoandar.com.br/docx-api/* | URL | In Scope | Bugcrowd | 2025-10-20 15:06 | |