Scope Updates
Recent changes to bug bounty program scopes.
| Change | Asset | Category | Scope | Program | Platform | Time |
|---|---|---|---|---|---|---|
| Added | phlportal.vfsevisa.cn | URL | In Scope | YesWeHack | 2026-01-14 09:31 | |
+Program Added | — | — | — | YesWeHack | 2026-01-10 04:30 | |
Associated Assets:URL*.jbl.com URLhttps://www.bowerswilkins.com URLhttps://www.denon.com URLhttps://www.marantz.com URL*.harmanaudio.com URL*.harmankardon.com URLhttps://www.polkaudio.com URL*.support.jbl.com URLhttps://www.definitivetechnology.com URL*.jbl.nl URLhttps://www.classeaudio.com URL*.jbl.ru URL*.uk.jbl.com URL*.uk.harmanaudio.com URL*.de.jbl.com URL*.in.jbl.com URL*.jbl.com.br URLhttps://www.bostonacoustics.com | ||||||
| Added | https://n8n.pub.k8s.dm.gg/* | URL | In Scope | YesWeHack | 2026-01-02 11:30 | |
| Added | https://n8n-staging.k8s.dm.gg/* | URL | In Scope | YesWeHack | 2026-01-02 11:30 | |
| Added | https://mcp.datadoghq.eu/* | URL | In Scope | YesWeHack | 2026-01-02 11:30 | |
| Added | https://airflow-mcp.data.dailymotion.com/* | OTHER | In Scope | YesWeHack | 2026-01-02 11:30 | |
| Added | https://bigquery-mcp.data.dailymotion.com/ | OTHER | In Scope | YesWeHack | 2026-01-02 11:30 | |
| Added | https://mcp.datadoghq.eu/api/unstable/mcp-server/mcp/* | URL | In Scope | YesWeHack | 2026-01-02 11:30 | |
| Added | trustedserver 100,000 bonus award (see program policy for info) | OTHER | In Scope | YesWeHack | 2025-12-31 08:30 | |
| Removed | https://github.com/expressvpn/lightway-core | OTHER | In Scope | YesWeHack | 2025-12-31 08:30 | |
| Removed | trustedvpn 100,000 bonus award (see program policy for info) | OTHER | In Scope | YesWeHack | 2025-12-31 08:30 | |
+Program Removed | — | — | — | YesWeHack | 2025-12-19 14:30 | |
Associated Assets:URLhttps://edge.blablacar.(fr|de|co.uk|in|es|mx|be|hr|hu|it|nl|pl|com.br|pt|ro|ru|com|tr|com.ua)) URLhttps://auth.blablacar.(fr|de|co.uk|in|es|mx|be|hr|hu|it|nl|pl|com.br|pt|ro|ru|com|tr|com.ua) URLhttps://www.blablacar.(fr|de|co.uk|in|es|mx|be|hr|hu|it|nl|pl|com.br|pt|ro|ru|com|tr|com.ua) URLhttps://m.blablacar.(fr|de|co.uk|in|es|mx|be|hr|hu|it|nl|pl|com.br|pt|ro|ru|com|tr|com.ua) ANDROIDhttps://play.google.com/store/apps/details?id=com.comuto&hl=en IOShttps://itunes.apple.com/fr/app/blablacar-trusted-carpooling/id341329033?l=en&mt=8 URLhttps://api.blablalines.com URLhttps://daily.blablacar.fr URLhttps://blablacardaily.com ANDROIDhttps://play.google.com/store/apps/details?id=com.blablalines IOShttps://apps.apple.com/fr/app/blablalines-covoiturage/id1225543288 | ||||||
| Added | https://www.vidaxl.(at|be|bg|ch|co.uk.com|com.au|com.ua|com|cz|de|dk|ee|es|fi|fr|gr|ie|is|it|hr|hu|lt|lv|no|nl|pl|pt|ro|se|si|sk|uk|ae|ca|jp) | URL | In Scope | YesWeHack | 2025-12-19 10:30 | |
| Removed | https://www.vidaxl{at|be|bg|ch|co.uk.com|com.au|com.ua|com|cz|de|dk|ee|es|fi|fr|gr|ie|is|it|hr|hu|lt|lv|no|nl|pl|pt|ro|se|si|sk|uk|ae|ca|jp} | URL | In Scope | YesWeHack | 2025-12-19 10:30 | |
| Added | *.gtflabs.io | WILDCARD | In Scope | YesWeHack | 2025-12-16 07:01 | |
| Added | portal.gofoodmerchant.co.id | URL | In Scope | YesWeHack | 2025-12-16 07:01 | |
| Added | *.gojek.com | WILDCARD | In Scope | YesWeHack | 2025-12-16 07:01 | |
| Added | *.gofoodmerchant.co.id | WILDCARD | In Scope | YesWeHack | 2025-12-16 07:01 | |
| Added | *.golabs.io | WILDCARD | In Scope | YesWeHack | 2025-12-16 07:01 | |
+Program Added | — | — | — | YesWeHack | 2025-12-11 16:01 | |
Associated Assets:URLhttps://edge.blablacar.(fr|de|co.uk|in|es|mx|be|hr|hu|it|nl|pl|com.br|pt|ro|ru|com|tr|com.ua)) URLhttps://auth.blablacar.(fr|de|co.uk|in|es|mx|be|hr|hu|it|nl|pl|com.br|pt|ro|ru|com|tr|com.ua) URLhttps://www.blablacar.(fr|de|co.uk|in|es|mx|be|hr|hu|it|nl|pl|com.br|pt|ro|ru|com|tr|com.ua) URLhttps://m.blablacar.(fr|de|co.uk|in|es|mx|be|hr|hu|it|nl|pl|com.br|pt|ro|ru|com|tr|com.ua) ANDROIDhttps://play.google.com/store/apps/details?id=com.comuto&hl=en IOShttps://itunes.apple.com/fr/app/blablacar-trusted-carpooling/id341329033?l=en&mt=8 URLhttps://api.blablalines.com URLhttps://daily.blablacar.fr URLhttps://blablacardaily.com ANDROIDhttps://play.google.com/store/apps/details?id=com.blablalines IOShttps://apps.apple.com/fr/app/blablalines-covoiturage/id1225543288 | ||||||
+Program Removed | — | — | — | YesWeHack | 2025-12-11 15:30 | |
Associated Assets:URLhttps://edge.blablacar.(fr|de|co.uk|in|es|mx|be|hr|hu|it|nl|pl|br|pt|ro|ru|com|tr|com.ua)) URLhttps://auth.blablacar.(fr|de|co.uk|in|es|mx|be|hr|hu|it|nl|pl|br|pt|ro|ru|com|tr|com.ua) URLhttps://www.blablacar.(fr|de|co.uk|in|es|mx|be|hr|hu|it|nl|pl|br|pt|ro|ru|com|tr|com.ua) URLhttps://m.blablacar.(fr|de|co.uk|in|es|mx|be|hr|hu|it|nl|pl|br|pt|ro|ru|com|tr|com.ua) ANDROIDhttps://play.google.com/store/apps/details?id=com.comuto&hl=en IOShttps://itunes.apple.com/fr/app/blablacar-trusted-carpooling/id341329033?l=en&mt=8 URLhttps://api.blablalines.com URLhttps://daily.blablacar.fr URLhttps://blablacardaily.com ANDROIDhttps://play.google.com/store/apps/details?id=com.blablalines IOShttps://apps.apple.com/fr/app/blablalines-covoiturage/id1225543288 | ||||||
+Program Added | — | — | — | YesWeHack | 2025-12-11 08:30 | |
Associated Assets:URLapi.ovh.com URLwww.ovh.com URL*.soyoustart.com | ||||||
+Program Removed | — | — | — | YesWeHack | 2025-12-10 23:30 | |
Associated Assets:URLapi.ovh.com URLwww.ovh.com URL*.soyoustart.com | ||||||
| Removed | www.lafabriquedelacite.com | URL | In Scope | YesWeHack | 2025-12-10 17:01 | |
| Removed | systemd-networkd | OPEN-SOURCE | In Scope | YesWeHack | 2025-12-10 15:01 | |