| + | Program Added | | https://hackerone.com/robinhood | hackerone | 2025-10-18 12:47 |
Associated Assets:- URL: api.robinhood.com
- URL: cashier.robinhood.com
- URL: minerva.robinhood.com
- URL: nummus.robinhood.com
- WILDCARD: https://*.saytechnologies.com
- OTHER: *.rhinternal.net
- OTHER: *.robinhood.com
- OTHER: *.robinhood.net
- OTHER: *.say.rocks
- OTHER: *.saytechnologies.com
- GOOGLE_PLAY_APP_ID: com.robinhood.android
- WILDCARD: https://*.say.rocks
- APPLE_STORE_APP_ID: 1634080733
- APPLE_STORE_APP_ID: 6462308655
- APPLE_STORE_APP_ID: 938003185
- GOOGLE_PLAY_APP_ID: com.robinhood.gateway
- GOOGLE_PLAY_APP_ID: com.robinhood.money
- URL: identi.robinhood.com
- URL: https://www.saytechnologies.com/contact/sales
- URL: shop.robinhood.com
- URL: fleet.infra.robinhood.net
- URL: content.research.robinhood.com
- URL: events.robinhood.com
- URL: affiliates.robinhood.com
- URL: vgs-api.robinhood.com
- URL: share.robinhood.com
- URL: esg.robinhood.com
- URL: startinvesting.robinhood.com
- URL: go.robinhood.com
- URL: underthehoodpod.robinhood.com
- URL: press.robinhood.com
- URL: roadshow.robinhood.com
- URL: weareallinvestors.robinhood.com
- URL: careers.robinhood.com
- URL: earlytalent.robinhood.com
|
| + | Program Added | | https://bugcrowd.com/engagements/carrefour | bugcrowd | 2025-10-18 10:07 |
Associated Assets:- IOS: https://itunes.apple.com/app/carrefour-uae/id626805470
- ANDROID: https://play.google.com/store/apps/details?id=com.aswat.carrefouruae
- WEBSITE: https://www.carrefouruae.com/
- API: https://api-prod.retailsso.com
- WEBSITE: https://cwingsfe.mafrservices.com/login
|
| + | Program Removed | | https://bugcrowd.com/engagements/carrefour | bugcrowd | 2025-10-18 09:36 |
Associated Assets:- IOS: https://itunes.apple.com/app/carrefour-uae/id626805470
- ANDROID: https://play.google.com/store/apps/details?id=com.aswat.carrefouruae
- WEBSITE: https://www.carrefouruae.com/
- API: https://api-prod.retailsso.com
- WEBSITE: https://cwingsfe.mafrservices.com/login
|
| + | Program Added | | https://bugcrowd.com/engagements/wise | bugcrowd | 2025-10-18 09:06 |
Associated Assets:- WEBSITE: https://transferwise.com
- WEBSITE: *.transferwise.com
- WEBSITE: https://wise.com
- WEBSITE: *.wise.com
- IOS: https://apps.apple.com/us/app/wise-ex-transferwise/id612261027
- ANDROID: https://play.google.com/store/apps/details?id=com.transferwise.android&hl=en_US&gl=US
- OTHER: AWS infrastructure and services in use by Wise (eg: S3 buckets)
- OTHER: https://github.com/transferwise/*
- WEBSITE: Wise Affiliate Program
- WEBSITE: Third party services not hosted by Wise
- OTHER: Any Github asset not under the “transferwise” organization
- WEBSITE: Third party authentication services (eg: Facebook and Google)
- WEBSITE: https://transferwise.com/help/contact
- WEBSITE: https://wise.com/help/contact
- WEBSITE: *.tw.com
- WEBSITE: *.tw.ee
- ANDROID: Non-current version of the Android app
- IOS: Non-current version of the iOS app
- WEBSITE: *.transferwise.tech
- WEBSITE: brand.wise.com
- WEBSITE: links.wise.com
- WEBSITE: widgets.transferwise.com
- WEBSITE: brand.transferwise.com
- WEBSITE: bootstrap.transferwise.com
- WEBSITE: links.transferwise.com
- WEBSITE: status.wise.com
- WEBSITE: status.transferwise.com
- WEBSITE: tech.transferwise.com
|
| + | Program Removed | | https://bugcrowd.com/engagements/wise | bugcrowd | 2025-10-18 08:36 |
Associated Assets:- WEBSITE: https://transferwise.com
- WEBSITE: *.transferwise.com
- WEBSITE: https://wise.com
- WEBSITE: *.wise.com
- IOS: https://apps.apple.com/us/app/wise-ex-transferwise/id612261027
- ANDROID: https://play.google.com/store/apps/details?id=com.transferwise.android&hl=en_US&gl=US
- OTHER: AWS infrastructure and services in use by Wise (eg: S3 buckets)
- OTHER: https://github.com/transferwise/*
- WEBSITE: Wise Affiliate Program
- WEBSITE: Third party services not hosted by Wise
- OTHER: Any Github asset not under the “transferwise” organization
- WEBSITE: Third party authentication services (eg: Facebook and Google)
- WEBSITE: https://transferwise.com/help/contact
- WEBSITE: https://wise.com/help/contact
- WEBSITE: *.tw.com
- WEBSITE: *.tw.ee
- ANDROID: Non-current version of the Android app
- IOS: Non-current version of the iOS app
- WEBSITE: *.transferwise.tech
- WEBSITE: brand.wise.com
- WEBSITE: links.wise.com
- WEBSITE: widgets.transferwise.com
- WEBSITE: brand.transferwise.com
- WEBSITE: bootstrap.transferwise.com
- WEBSITE: links.transferwise.com
- WEBSITE: status.wise.com
- WEBSITE: status.transferwise.com
- WEBSITE: tech.transferwise.com
|
| + | Program Added | | https://bugcrowd.com/engagements/wise | bugcrowd | 2025-10-18 08:06 |
Associated Assets:- WEBSITE: https://transferwise.com
- WEBSITE: *.transferwise.com
- WEBSITE: https://wise.com
- WEBSITE: *.wise.com
- IOS: https://apps.apple.com/us/app/wise-ex-transferwise/id612261027
- ANDROID: https://play.google.com/store/apps/details?id=com.transferwise.android&hl=en_US&gl=US
- OTHER: AWS infrastructure and services in use by Wise (eg: S3 buckets)
- OTHER: https://github.com/transferwise/*
- WEBSITE: Wise Affiliate Program
- WEBSITE: Third party services not hosted by Wise
- OTHER: Any Github asset not under the “transferwise” organization
- WEBSITE: Third party authentication services (eg: Facebook and Google)
- WEBSITE: https://transferwise.com/help/contact
- WEBSITE: https://wise.com/help/contact
- WEBSITE: *.tw.com
- WEBSITE: *.tw.ee
- ANDROID: Non-current version of the Android app
- IOS: Non-current version of the iOS app
- WEBSITE: *.transferwise.tech
- WEBSITE: brand.wise.com
- WEBSITE: links.wise.com
- WEBSITE: widgets.transferwise.com
- WEBSITE: brand.transferwise.com
- WEBSITE: bootstrap.transferwise.com
- WEBSITE: links.transferwise.com
- WEBSITE: status.wise.com
- WEBSITE: status.transferwise.com
- WEBSITE: tech.transferwise.com
|
| + | Program Removed | | https://bugcrowd.com/engagements/wise | bugcrowd | 2025-10-18 07:36 |
Associated Assets:- WEBSITE: https://transferwise.com
- WEBSITE: *.transferwise.com
- WEBSITE: https://wise.com
- WEBSITE: *.wise.com
- IOS: https://apps.apple.com/us/app/wise-ex-transferwise/id612261027
- ANDROID: https://play.google.com/store/apps/details?id=com.transferwise.android&hl=en_US&gl=US
- OTHER: AWS infrastructure and services in use by Wise (eg: S3 buckets)
- OTHER: https://github.com/transferwise/*
- WEBSITE: Wise Affiliate Program
- WEBSITE: Third party services not hosted by Wise
- OTHER: Any Github asset not under the “transferwise” organization
- WEBSITE: Third party authentication services (eg: Facebook and Google)
- WEBSITE: https://transferwise.com/help/contact
- WEBSITE: https://wise.com/help/contact
- WEBSITE: *.tw.com
- WEBSITE: *.tw.ee
- ANDROID: Non-current version of the Android app
- IOS: Non-current version of the iOS app
- WEBSITE: *.transferwise.tech
- WEBSITE: brand.wise.com
- WEBSITE: links.wise.com
- WEBSITE: widgets.transferwise.com
- WEBSITE: brand.transferwise.com
- WEBSITE: bootstrap.transferwise.com
- WEBSITE: links.transferwise.com
- WEBSITE: status.wise.com
- WEBSITE: status.transferwise.com
- WEBSITE: tech.transferwise.com
|
| + | Program Removed | | https://app.intigriti.c...rgamma/intergamma/detail | intigriti | 2025-10-18 06:30 |
Associated Assets:- IOS: 949829216
- IOS: 950680989
- IOS: 950693949
- ANDROID: be.gamma.app.android
- WILDCARD: kassa.gamma.be/*
- WILDCARD: kassa.gamma.nl/*
- WILDCARD: kassa.karwei.nl/*
- WILDCARD: mijn.gamma.be/*
- WILDCARD: mijn.gamma.nl/*
- WILDCARD: mijn.karwei.nl/*
- ANDROID: nl.gamma.app.android
- ANDROID: nl.karwei.app.android
- WILDCARD: www.gamma.be/*
- WILDCARD: www.gamma.nl/*
- WILDCARD: www.karwei.nl/*
- WILDCARD: *.gamma.be/*
- WILDCARD: *.gamma.nl/*
- WILDCARD: *.intergamma.cloud
- WILDCARD: *.intergamma.nl/*
- WILDCARD: *.karwei.nl/*
- WILDCARD: *.restintergamma.nl
- IOS: 1558129454
- WILDCARD: *.intergamma-test.nl
- WILDCARD: *.werkenbijgamma.be
- WILDCARD: *.werkenbijgamma.nl
- WILDCARD: *.werkenbijkarwei.nl
- WILDCARD: *.configuratoren.nl/*
- URL: afspraakmaken.gamma.nl
- URL: api.afspraakmaken.gamma.be
- URL: api.afspraakmaken.gamma.nl
- URL: api.maakafspraak.karwei.nl
- OTHER: Everything related to configurators, both on primary as other domains
- URL: horrenconfigurator-fr.gamma.be
- URL: horrenconfigurator-nl.gamma.be
- URL: horrenconfigurator.karwei.nl
- URL: karwei-2018.hetmooistegordijn.nl
- URL: maakafspraak.karwei.nl
- URL: mail.gamma.be
- URL: mail.gamma.nl
- URL: mail.karwei.nl
|
| + | Program Removed | | https://app.intigriti.c...ido/aikidoruntime/detail | intigriti | 2025-10-18 05:30 |
Associated Assets:- OTHER: https://github.com/AikidoSec/firewall-node#Vulnerability
- OTHER: https://github.com/AikidoSec/firewall-python#Vulnerability
- OTHER: https://github.com/AikidoSec/firewall-node#Detection Bypass
- OTHER: https://github.com/AikidoSec/firewall-python#Detection Bypass
- OTHER: https://github.com/AikidoSec/firewall-node#False Positive
- OTHER: https://github.com/AikidoSec/firewall-python#False Positive
|
| + | Program Removed | | https://app.intigriti.c...wpenginebugbounty/detail | intigriti | 2025-10-18 02:00 |
Associated Assets:- URL: https://app.getflywheel.com
- URL: https://getflywheel.com
- URL: https://my.wpengine.com
- URL: https://payments.wpengine.com
- URL: https://wpengine.com
- WILDCARD: *. advancedcustomfields.com
- WILDCARD: *. bettersearchreplace.com
- WILDCARD: *.deliciousbrains.com
- WILDCARD: *.localwp.com
- WILDCARD: *.nitropack.io
- WILDCARD: *.studiopress.com
- WILDCARD: *.wpengine.io
- WILDCARD: *.wpesvc.net
- OTHER: WP Engine-developed WordPress Plugins and Themes
- URL: https://makeshift.film
- URL: https://studiopress.blog
- URL: https://torquemag.io
- URL: https://velocitize.com
|
| + | Program Added | | https://app.intigriti.c...aytechnologiesbbp/detail | intigriti | 2025-10-17 23:30 |
Associated Assets:- WILDCARD: https://*.saytechnologies.com
- WILDCARD: https://*.say.rocks
- URL: https://www.saytechnologies.com/contact/sales
|
| + | Program Added | | https://app.intigriti.c...hood/robinhoodbbp/detail | intigriti | 2025-10-17 23:30 |
Associated Assets:- WILDCARD: *.rhinternal.net
- WILDCARD: *.robinhood.com
- WILDCARD: *.robinhood.net
- IOS: 1634080733
- IOS: 6462308655
- IOS: 938003185
- ANDROID: com.robinhood.android
- ANDROID: com.robinhood.gateway
- ANDROID: com.robinhood.money
- URL: earlytalent.robinhood.com
- URL: careers.robinhood.com
- URL: weareallinvestors.robinhood.com
- URL: press.robinhood.com
- URL: underthehoodpod.robinhood.com
- URL: go.robinhood.com
- URL: startinvesting.robinhood.com
- URL: esg.robinhood.com
- URL: fleet.infra.robinhood.net
- URL: content.research.robinhood.com
- URL: shop.robinhood.com
- URL: events.robinhood.com
- URL: vgs-api.robinhood.com
- URL: affiliates.robinhood.com/
- URL: share.robinhood.com
- URL: roadshow.robinhood.com
|
| Asset Added: OTHER: Fishbowl | Out of Scope | https://hackerone.com/glassdoor | hackerone | 2025-10-17 20:57 |
| Asset Removed: OTHER: Fishbowl | In Scope | https://hackerone.com/glassdoor | hackerone | 2025-10-17 20:57 |
| Asset Added: WEBSITE: https://gov.bugcrowd.net | In Scope | https://bugcrowd.com/engagements/bugcrowd | bugcrowd | 2025-10-17 20:36 |
| Asset Added: WEBSITE: https://*.gov.bugcrowd.net | In Scope | https://bugcrowd.com/engagements/bugcrowd | bugcrowd | 2025-10-17 20:36 |
| Asset Added: OTHER: https://mcp.opensea.io | In Scope | https://bugcrowd.com/engagements/opensea | bugcrowd | 2025-10-17 18:06 |
| Asset Added: URL: diabrowser.com | In Scope | https://hackerone.com/bcny | hackerone | 2025-10-17 16:52 |
| + | Program Added | | https://app.intigriti.c...r/houseofhrpublic/detail | intigriti | 2025-10-17 15:00 |
No specific asset details were logged for this program change. |
| + | Program Added | | https://bugcrowd.com/engagements/soundcloud | bugcrowd | 2025-10-17 14:06 |
Associated Assets:- ANDROID: https://play.google.com/store/apps/details?id=com.soundcloud.android&hl=en&gl=US
- WEBSITE: https://soundcloud.com
- WEBSITE: *.soundcloud.org
- WEBSITE: *.s-cloud.net
- IOS: https://apps.apple.com/us/app/soundcloud-music-audio/id336353151
- API: https://connect.soundcloud.com
- API: *.services.repostnetwork.com
- API: api-*.soundcloud.com
- WEBSITE: http://artists.soundcloud.com/
- WEBSITE: https://soundcloud.org
- WEBSITE: blog.soundcloud.com
- WEBSITE: status.soundcloud.com
- WEBSITE: help.soundcloud.com
- WEBSITE: community.soundcloud.com
- WEBSITE: copyright.soundcloud.com
- WEBSITE: advertising.soundcloud.com
- OTHER: https://soundcloudmail.com
- WEBSITE: press.soundcloud.com
- WEBSITE: https://scdrops.soundcloud.com
- WEBSITE: https://promote.soundcloud.com
- WEBSITE: contest.soundcloud.com
- WEBSITE: playback.soundcloud.com
- WEBSITE: jobs.soundcloud.com
- WEBSITE: playerone.soundcloud.com
- WEBSITE: support.soundcloud.org
- WEBSITE: secdomaintest.soundcloud.com
- WEBSITE: firston.soundcloud.com
|
| + | Program Removed | | https://app.intigriti.c...aytechnologiesbbp/detail | intigriti | 2025-10-17 14:00 |
Associated Assets:- WILDCARD: https://*.saytechnologies.com
- WILDCARD: https://*.say.rocks
- URL: https://www.saytechnologies.com/contact/sales
|
| + | Program Removed | | https://app.intigriti.c...hood/robinhoodbbp/detail | intigriti | 2025-10-17 14:00 |
Associated Assets:- WILDCARD: *.rhinternal.net
- WILDCARD: *.robinhood.com
- WILDCARD: *.robinhood.net
- IOS: 1634080733
- IOS: 6462308655
- IOS: 938003185
- ANDROID: com.robinhood.android
- ANDROID: com.robinhood.gateway
- ANDROID: com.robinhood.money
- URL: earlytalent.robinhood.com
- URL: careers.robinhood.com
- URL: weareallinvestors.robinhood.com
- URL: press.robinhood.com
- URL: underthehoodpod.robinhood.com
- URL: go.robinhood.com
- URL: startinvesting.robinhood.com
- URL: esg.robinhood.com
- URL: fleet.infra.robinhood.net
- URL: content.research.robinhood.com
- URL: shop.robinhood.com
- URL: events.robinhood.com
- URL: vgs-api.robinhood.com
- URL: affiliates.robinhood.com/
- URL: share.robinhood.com
- URL: roadshow.robinhood.com
|
| + | Program Added | | https://bugcrowd.com/engagements/sendbird-mbb | bugcrowd | 2025-10-17 13:36 |
Associated Assets:- WEBSITE: https://dashboard.sendbird.com/
- API: https://gate.sendbird.com
- API: https://api-{app-id}.sendbird.com
- API: https://ws-{app-id}.sendbird.com
- API: https://desk-api-{region}.sendbird.com
- API: https://ws-{app-id}.calls.sendbird.com
- API: https://api-{app-id}.calls.sendbird.com
- API: https://api-{app-id}.notifications.sendbird.com
- WEBSITE: https://sendbird.com/docs
- WEBSITE: https://sendbird.com
|
| + | Program Removed | | https://bugcrowd.com/engagements/soundcloud | bugcrowd | 2025-10-17 13:36 |
Associated Assets:- ANDROID: https://play.google.com/store/apps/details?id=com.soundcloud.android&hl=en&gl=US
- WEBSITE: https://soundcloud.com
- WEBSITE: *.soundcloud.org
- WEBSITE: *.s-cloud.net
- IOS: https://apps.apple.com/us/app/soundcloud-music-audio/id336353151
- API: https://connect.soundcloud.com
- API: *.services.repostnetwork.com
- API: api-*.soundcloud.com
- WEBSITE: http://artists.soundcloud.com/
- WEBSITE: https://soundcloud.org
- WEBSITE: blog.soundcloud.com
- WEBSITE: status.soundcloud.com
- WEBSITE: help.soundcloud.com
- WEBSITE: community.soundcloud.com
- WEBSITE: copyright.soundcloud.com
- WEBSITE: advertising.soundcloud.com
- OTHER: https://soundcloudmail.com
- WEBSITE: press.soundcloud.com
- WEBSITE: https://scdrops.soundcloud.com
- WEBSITE: https://promote.soundcloud.com
- WEBSITE: contest.soundcloud.com
- WEBSITE: playback.soundcloud.com
- WEBSITE: jobs.soundcloud.com
- WEBSITE: playerone.soundcloud.com
- WEBSITE: support.soundcloud.org
- WEBSITE: secdomaintest.soundcloud.com
- WEBSITE: firston.soundcloud.com
|
| + | Program Added | | https://bugcrowd.com/engagements/soundcloud | bugcrowd | 2025-10-17 13:06 |
Associated Assets:- ANDROID: https://play.google.com/store/apps/details?id=com.soundcloud.android&hl=en&gl=US
- WEBSITE: https://soundcloud.com
- WEBSITE: *.soundcloud.org
- WEBSITE: *.s-cloud.net
- IOS: https://apps.apple.com/us/app/soundcloud-music-audio/id336353151
- API: https://connect.soundcloud.com
- API: *.services.repostnetwork.com
- API: api-*.soundcloud.com
- WEBSITE: http://artists.soundcloud.com/
- WEBSITE: https://soundcloud.org
- WEBSITE: blog.soundcloud.com
- WEBSITE: status.soundcloud.com
- WEBSITE: help.soundcloud.com
- WEBSITE: community.soundcloud.com
- WEBSITE: copyright.soundcloud.com
- WEBSITE: advertising.soundcloud.com
- OTHER: https://soundcloudmail.com
- WEBSITE: press.soundcloud.com
- WEBSITE: https://scdrops.soundcloud.com
- WEBSITE: https://promote.soundcloud.com
- WEBSITE: contest.soundcloud.com
- WEBSITE: playback.soundcloud.com
- WEBSITE: jobs.soundcloud.com
- WEBSITE: playerone.soundcloud.com
- WEBSITE: support.soundcloud.org
- WEBSITE: secdomaintest.soundcloud.com
- WEBSITE: firston.soundcloud.com
|