Scope Updates

Recent changes to bug bounty program scopes.

	Asset / Change	Scope Type	Program URL	Platform	Timestamp
	Asset Removed: OTHER: https://chromewebstore.google.com/detail/expressvpn-vpn-proxy-for/fgddmllnllkalaagkghckoinaemmogpe?pli=1	In Scope	https://bugcrowd.com/engagements/expressvpn	bugcrowd	2025-07-08 15:43
	Asset Removed: OTHER: https://chromewebstore.google.com/detail/expressvpn-keys-password/blgcbajigpdfohpgcmbbfnphcgifjopc	In Scope	https://bugcrowd.com/engagements/expressvpn	bugcrowd	2025-07-08 15:43
	Asset Added: WILDCARD: *.as-nmt.de	In Scope	https://app.intigriti.c...xelspringerse/nmt/detail	intigriti	2025-07-08 15:00
	Asset Added: WEBSITE: ███████████████████	Out of Scope	https://bugcrowd.com/engagements/shoppingcart	bugcrowd	2025-07-08 13:40
	Asset Removed: WEBSITE: *.1shoppingcart.com	Out of Scope	https://bugcrowd.com/engagements/shoppingcart	bugcrowd	2025-07-08 13:40
	Asset Added: WEBSITE: █████████████████	In Scope	https://bugcrowd.com/engagements/shoppingcart	bugcrowd	2025-07-08 13:40
	Asset Added: WEBSITE: █████████	In Scope	https://bugcrowd.com/engagements/shoppingcart	bugcrowd	2025-07-08 13:40
	Asset Added: WEBSITE: ███████████	In Scope	https://bugcrowd.com/engagements/shoppingcart	bugcrowd	2025-07-08 13:40
	Asset Removed: WEBSITE: https://1shoppingcart.com	In Scope	https://bugcrowd.com/engagements/shoppingcart	bugcrowd	2025-07-08 13:40
	Asset Removed: WEBSITE: https://mcssl.com	In Scope	https://bugcrowd.com/engagements/shoppingcart	bugcrowd	2025-07-08 13:40
	Asset Removed: WEBSITE: *.mcssl.com	In Scope	https://bugcrowd.com/engagements/shoppingcart	bugcrowd	2025-07-08 13:40
+	Program Added		https://app.intigriti.c...ido/aikidoruntime/detail	intigriti	2025-07-08 10:30
Associated Assets: OTHER: https://github.com/AikidoSec/firewall-node#Vulnerability OTHER: https://github.com/AikidoSec/firewall-python#Vulnerability OTHER: https://github.com/AikidoSec/firewall-node#Detection Bypass OTHER: https://github.com/AikidoSec/firewall-python#Detection Bypass OTHER: https://github.com/AikidoSec/firewall-node#False Positive OTHER: https://github.com/AikidoSec/firewall-python#False Positive
+	Program Added		https://bugcrowd.com/engagements/canva	bugcrowd	2025-07-08 09:43
Associated Assets: WEBSITE: https://www.canva.com WEBSITE: https://www.canva.com/developers/ OTHER: Apps SDK Sandboxing API: https://api.canva.com WEBSITE: .canva.com WEBSITE: .canva-apps.com WEBSITE: https://.canva.tech WEBSITE: https://www.canva.com/en_au/help/chatgpt-templates/ WEBSITE: https://www.canva.com/integrations/slack/ OTHER: Canva Desktop (macOS / Windows) IOS: Canva (iOS) ANDROID: Canva (Android) OTHER: Canva (Chrome Extension) WEBSITE: .canva.cn WEBSITE: *.canva-apps.cn OTHER: Leaked Credentials and Secrets (Canva Employee/Contractor) OTHER: Leaked Credentials and Secrets (Canva User) OTHER: 3rd-Party Provider Vulnerability
+	Program Removed		https://bugcrowd.com/engagements/canva	bugcrowd	2025-07-08 09:07
Associated Assets: WEBSITE: https://www.canva.com WEBSITE: https://www.canva.com/developers/ OTHER: Apps SDK Sandboxing API: https://api.canva.com WEBSITE: .canva.com WEBSITE: .canva-apps.com WEBSITE: https://.canva.tech WEBSITE: https://www.canva.com/en_au/help/chatgpt-templates/ WEBSITE: https://www.canva.com/integrations/slack/ OTHER: Canva Desktop (macOS / Windows) IOS: Canva (iOS) ANDROID: Canva (Android) OTHER: Canva (Chrome Extension) WEBSITE: .canva.cn WEBSITE: *.canva-apps.cn OTHER: Leaked Credentials and Secrets (Canva Employee/Contractor) OTHER: Leaked Credentials and Secrets (Canva User) OTHER: 3rd-Party Provider Vulnerability
+	Program Added		https://app.intigriti.c...datacamp/datacamp/detail	intigriti	2025-07-08 08:30
Associated Assets: URL: app.datacamp.com/certification URL: app.datacamp.com/groups URL: app.datacamp.com/learn URL: assessment-api.datacamp.com URL: assessment-v2.datacamp.com URL: assessment.datacamp.com URL: campus.datacamp.com ANDROID: com.datacamp IOS: https://apps.apple.com/au/app/datacamp-learn-data-science/id1263413087 URL: practice.datacamp.com URL: projects.datacamp.com URL: www.datacamp.com URL: www.datacamp.com/datalab WILDCARD: .datacamp.com WILDCARD: .it.datacamp.com URL: app.datacamp.com/recruit URL: ast-viewer.datacamp.com URL: confluence.datacamp.com URL: dccertified.datacamp.com URL: intranet.datacamp.com URL: jira.datacamp.com URL: links.datacamp.com URL: rdocumentation.datacamp.com URL: signature.datacamp.com URL: status.datacamp.com URL: support.datacamp.com URL: talent-jobs-api.datacamp.com
	Asset Added: APPLE_STORE_APP_ID: 6670536058	In Scope	https://hackerone.com/eternal	hackerone	2025-07-08 07:37
	Asset Added: APPLE_STORE_APP_ID: 960335206	In Scope	https://hackerone.com/eternal	hackerone	2025-07-08 07:37
	Asset Added: GOOGLE_PLAY_APP_ID: com.application.zomato.district	In Scope	https://hackerone.com/eternal	hackerone	2025-07-08 07:32
	Asset Removed: WEB-APPLICATION: https://vfsuserverification.azurewebsites.net/	In Scope	https://yeswehack.com/p...lobal-bug-bounty-program	yeswehack	2025-07-08 07:30
	Asset Removed: WEB-APPLICATION: https://vfs-ai-doc-reader.azurewebsites.net/	In Scope	https://yeswehack.com/p...lobal-bug-bounty-program	yeswehack	2025-07-08 07:30
+	Program Added		https://app.intigriti.c...ios/embarkstudios/detail	intigriti	2025-07-08 05:30
Associated Assets: WILDCARD: .es-dis.net WILDCARD: .es-pio.net URL: auth.embark.net URL: id.embark.games WILDCARD: *.observability.embark.net URL: asset-metadata-api.embark.net URL: github.com/EmbarkStudios/presser URL: grafana.embark.net URL: has.embark.net URL: p4-submit-service.embark.net URL: perforce.embark.net URL: swarm.embark.net URL: user-lookup-api.embark.net URL: vpn.embark.net URL: arcraiders.com URL: embark-studios.com URL: github.com/EmbarkStudios/cargo-about URL: github.com/EmbarkStudios/cargo-deny URL: github.com/EmbarkStudios/crash-handling URL: reachthefinals.com
+	Program Added		https://hackerone.com/skale_network	hackerone	2025-07-07 08:52
Associated Assets: SOURCE_CODE: https://github.com/skalenetwork/skale-consensus SOURCE_CODE: https://github.com/skalenetwork/libBLS SOURCE_CODE: https://github.com/skalenetwork/sgxwallet SOURCE_CODE: https://github.com/skalenetwork/skale-manager/tree/develop/contracts SOURCE_CODE: https://github.com/skalenetwork/skale-node-cli SOURCE_CODE: https://github.com/skalenetwork/validator-cli WILDCARD: *.skale.network
+	Program Removed		https://app.intigriti.c...datacamp/datacamp/detail	intigriti	2025-07-07 07:00
Associated Assets: URL: app.datacamp.com/certification URL: app.datacamp.com/groups URL: app.datacamp.com/learn URL: assessment-api.datacamp.com URL: assessment-v2.datacamp.com URL: assessment.datacamp.com URL: campus.datacamp.com ANDROID: com.datacamp IOS: https://apps.apple.com/au/app/datacamp-learn-data-science/id1263413087 URL: practice.datacamp.com URL: projects.datacamp.com URL: www.datacamp.com URL: www.datacamp.com/datalab WILDCARD: .datacamp.com WILDCARD: .it.datacamp.com URL: app.datacamp.com/recruit URL: ast-viewer.datacamp.com URL: confluence.datacamp.com URL: dccertified.datacamp.com URL: intranet.datacamp.com URL: jira.datacamp.com URL: links.datacamp.com URL: rdocumentation.datacamp.com URL: signature.datacamp.com URL: status.datacamp.com URL: support.datacamp.com URL: talent-jobs-api.datacamp.com
	Asset Added: OTHER: All In Scope Targets	In Scope	https://bugcrowd.com/engagements/moovit-mbb-og	bugcrowd	2025-07-07 06:39
+	Program Added		https://app.intigriti.c...f/veriffbugbounty/detail	intigriti	2025-07-07 06:00
Associated Assets: IOS: 1467907532 URL: alchemy.veriff.com URL: api.flamingo-eu.veriff.com URL: api.us.veriff.me URL: api.veriff.me ANDROID: com.veriff.demo URL: louvre.veriff.me URL: magic.veriff.me URL: station.veriff.com URL: stationapi.veriff.com WILDCARD: *.veriff.com URL: developers.veriff.me URL: www.veriff.com URL: https://station.veriff.com/config/

Scope Updates

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets: