Scope Updates

Recent changes to bug bounty program scopes.

	Asset / Change	Scope Type	Program URL	Platform	Timestamp
	Asset Added: URL: https://oneview.threatdownstage.com	In Scope	https://hackerone.com/malwarebytes	hackerone	2025-10-23 13:47
	Asset Removed: WEB-APPLICATION: https://login.decathlon.net/*	In Scope	https://yeswehack.com/programs/decathlon	yeswehack	2025-10-23 12:00
	Asset Removed: WEB-APPLICATION: https://account.decathlon.com/*	In Scope	https://yeswehack.com/programs/decathlon	yeswehack	2025-10-23 12:00
+	Program Removed		https://app.intigriti.c...grams/torfs/torfs/detail	intigriti	2025-10-23 09:30
Associated Assets: URL: winkels.torfs.be URL: www.schoenentorfs.be URL: www.schoenentorfs.nl URL: www.torfs.be URL: www.torfs.nl URL: www.samenfittorfs.be
+	Program Removed		https://hackerone.com/kolesagroup	hackerone	2025-10-23 04:07
Associated Assets: URL: kolesa.kz APPLE_STORE_APP_ID: 563291345 OTHER_APK: kz.kolesa URL: m.kolesa.kz URL: krisha.kz URL: m.krisha.kz APPLE_STORE_APP_ID: 965180355 OTHER_APK: kz.krisha URL: avtoelon.uz OTHER_APK: uz.avtoelon APPLE_STORE_APP_ID: 1431768824 URL: m.avtoelon.uz URL: api.kolesa.kz URL: app.kolesa.kz URL: id.kolesa.kz URL: api.krisha.kz URL: app.krisha.kz URL: api.avtoelon.uz URL: app.avtoelon.uz URL: id.avtoelon.uz OTHER: Kolesa website OTHER: Krisha website OTHER: Avtoelon website OTHER: Mobile Apps
+	Program Added		https://bugcrowd.com/engagements/indeed	bugcrowd	2025-10-22 22:36
Associated Assets: WEBSITE: https://indeed.com WEBSITE: https://.indeedflex.com API: https://apis.indeed.com/graphql ANDROID: https://play.google.com/store/apps/details?id=com.indeed.android.jobsearch IOS: https://apps.apple.com/us/app/indeed-job-search/id309735670 ANDROID: https://play.google.com/store/apps/details?id=com.syftapp.android IOS: https://apps.apple.com/gb/app/indeed-flex-job-search/id1013812731 WEBSITE: Career Scout WEBSITE: https://.indeed.tech WEBSITE: https://*.indeed.net WEBSITE: https://resume.com WEBSITE: https://wowjobs.ca IOS: https://apps.apple.com/us/app/%E5%B1%A5%E6%AD%B4%E6%9B%B8%E4%BD%9C%E6%88%90-%E3%82%A4%E3%83%B3%E3%83%87%E3%82%A3%E3%83%BC%E3%83%89/id1484451230 ANDROID: https://play.google.com/store/apps/details?id=com.indeed.resume IOS: https://apps.apple.com/us/app/indeed-connect-for-employers/id6443822731 WEBSITE: https://chromewebstore.google.com/detail/indeed-recruiter-extensio/kiodpphbmnmcmnfgpnmkkhmkllnlflef OTHER: Any host/web property/mobile app verified to be owned by Indeed
+	Program Removed		https://bugcrowd.com/engagements/indeed	bugcrowd	2025-10-22 21:36
Associated Assets: WEBSITE: https://indeed.com WEBSITE: https://.indeedflex.com API: https://apis.indeed.com/graphql ANDROID: https://play.google.com/store/apps/details?id=com.indeed.android.jobsearch IOS: https://apps.apple.com/us/app/indeed-job-search/id309735670 ANDROID: https://play.google.com/store/apps/details?id=com.syftapp.android IOS: https://apps.apple.com/gb/app/indeed-flex-job-search/id1013812731 WEBSITE: Career Scout WEBSITE: https://.indeed.tech WEBSITE: https://*.indeed.net WEBSITE: https://resume.com WEBSITE: https://wowjobs.ca IOS: https://apps.apple.com/us/app/%E5%B1%A5%E6%AD%B4%E6%9B%B8%E4%BD%9C%E6%88%90-%E3%82%A4%E3%83%B3%E3%83%87%E3%82%A3%E3%83%BC%E3%83%89/id1484451230 ANDROID: https://play.google.com/store/apps/details?id=com.indeed.resume IOS: https://apps.apple.com/us/app/indeed-connect-for-employers/id6443822731 WEBSITE: https://chromewebstore.google.com/detail/indeed-recruiter-extensio/kiodpphbmnmcmnfgpnmkkhmkllnlflef OTHER: Any host/web property/mobile app verified to be owned by Indeed
	Asset Added: IOS: https://app.bitrise.io/app/5bec038cb1e318cd/installable-artifacts/9ad837caadc77d33/public-install-page/ef39a3be131d116b6da3f9d05c70d757	In Scope	https://bugcrowd.com/engagements/chime	bugcrowd	2025-10-22 21:06
	Asset Added: ANDROID: https://app.bitrise.io/app/5bec038cb1e318cd/installable-artifacts/d2424d9760af75d5/public-install-page/4883ab94cee43b34c597ad1df833911f	In Scope	https://bugcrowd.com/engagements/chime	bugcrowd	2025-10-22 21:06
	Asset Removed: IOS: https://app.bitrise.io/app/5bec038cb1e318cd/build/0e56ea84-4683-4ef6-8d3e-60eb0a012c25/artifact/cf0e6abc6528df88/p/85802412acd014f154decf14e4bb8c57	In Scope	https://bugcrowd.com/engagements/chime	bugcrowd	2025-10-22 21:06
	Asset Removed: ANDROID: https://app.bitrise.io/app/5bec038cb1e318cd/build/e071d2ed-1b34-41d7-88ac-78d683fce9c7/artifact/4edf32abe1b497ea/p/2f6cacc3a3ca02df5fc194248bfb15b7	In Scope	https://bugcrowd.com/engagements/chime	bugcrowd	2025-10-22 21:06
+	Program Added		https://bugcrowd.com/engagements/indeed	bugcrowd	2025-10-22 20:37
Associated Assets: WEBSITE: https://indeed.com WEBSITE: https://.indeedflex.com API: https://apis.indeed.com/graphql ANDROID: https://play.google.com/store/apps/details?id=com.indeed.android.jobsearch IOS: https://apps.apple.com/us/app/indeed-job-search/id309735670 ANDROID: https://play.google.com/store/apps/details?id=com.syftapp.android IOS: https://apps.apple.com/gb/app/indeed-flex-job-search/id1013812731 WEBSITE: Career Scout WEBSITE: https://.indeed.tech WEBSITE: https://*.indeed.net WEBSITE: https://resume.com WEBSITE: https://wowjobs.ca IOS: https://apps.apple.com/us/app/%E5%B1%A5%E6%AD%B4%E6%9B%B8%E4%BD%9C%E6%88%90-%E3%82%A4%E3%83%B3%E3%83%87%E3%82%A3%E3%83%BC%E3%83%89/id1484451230 ANDROID: https://play.google.com/store/apps/details?id=com.indeed.resume IOS: https://apps.apple.com/us/app/indeed-connect-for-employers/id6443822731 WEBSITE: https://chromewebstore.google.com/detail/indeed-recruiter-extensio/kiodpphbmnmcmnfgpnmkkhmkllnlflef OTHER: Any host/web property/mobile app verified to be owned by Indeed
+	Program Removed		https://bugcrowd.com/engagements/indeed	bugcrowd	2025-10-22 20:06
Associated Assets: WEBSITE: https://indeed.com WEBSITE: https://.indeedflex.com API: https://apis.indeed.com/graphql ANDROID: https://play.google.com/store/apps/details?id=com.indeed.android.jobsearch IOS: https://apps.apple.com/us/app/indeed-job-search/id309735670 ANDROID: https://play.google.com/store/apps/details?id=com.syftapp.android IOS: https://apps.apple.com/gb/app/indeed-flex-job-search/id1013812731 WEBSITE: Career Scout WEBSITE: https://.indeed.tech WEBSITE: https://*.indeed.net WEBSITE: https://resume.com WEBSITE: https://wowjobs.ca IOS: https://apps.apple.com/us/app/%E5%B1%A5%E6%AD%B4%E6%9B%B8%E4%BD%9C%E6%88%90-%E3%82%A4%E3%83%B3%E3%83%87%E3%82%A3%E3%83%BC%E3%83%89/id1484451230 ANDROID: https://play.google.com/store/apps/details?id=com.indeed.resume IOS: https://apps.apple.com/us/app/indeed-connect-for-employers/id6443822731 WEBSITE: https://chromewebstore.google.com/detail/indeed-recruiter-extensio/kiodpphbmnmcmnfgpnmkkhmkllnlflef OTHER: Any host/web property/mobile app verified to be owned by Indeed
+	Program Added		https://bugcrowd.com/engagements/canva	bugcrowd	2025-10-22 19:36
Associated Assets: WEBSITE: https://www.canva.com WEBSITE: https://www.canva.com/developers/ OTHER: Apps SDK Sandboxing API: https://api.canva.com WEBSITE: .canva.com WEBSITE: .canva-apps.com WEBSITE: https://.canva.tech WEBSITE: https://www.canva.com/en_au/help/chatgpt-templates/ WEBSITE: https://www.canva.com/integrations/slack/ OTHER: Canva Desktop (macOS / Windows) IOS: Canva (iOS) ANDROID: Canva (Android) OTHER: Canva (Chrome Extension) WEBSITE: .canva.cn WEBSITE: *.canva-apps.cn OTHER: Leaked Credentials and Secrets (Canva Employee/Contractor) OTHER: Leaked Credentials and Secrets (Canva User) OTHER: 3rd-Party Provider Vulnerability
+	Program Removed		https://bugcrowd.com/engagements/canva	bugcrowd	2025-10-22 19:06
Associated Assets: WEBSITE: https://www.canva.com WEBSITE: https://www.canva.com/developers/ OTHER: Apps SDK Sandboxing API: https://api.canva.com WEBSITE: .canva.com WEBSITE: .canva-apps.com WEBSITE: https://.canva.tech WEBSITE: https://www.canva.com/en_au/help/chatgpt-templates/ WEBSITE: https://www.canva.com/integrations/slack/ OTHER: Canva Desktop (macOS / Windows) IOS: Canva (iOS) ANDROID: Canva (Android) OTHER: Canva (Chrome Extension) WEBSITE: .canva.cn WEBSITE: *.canva-apps.cn OTHER: Leaked Credentials and Secrets (Canva Employee/Contractor) OTHER: Leaked Credentials and Secrets (Canva User) OTHER: 3rd-Party Provider Vulnerability
	Asset Removed: SOURCE_CODE: https://github.com/circlefin/stablecoin-starknet	In Scope	https://hackerone.com/circle-bbp	hackerone	2025-10-22 17:47
	Asset Added: SOURCE_CODE: https://github.com/circlefin/stablecoin-starknet	In Scope	https://hackerone.com/circle-bbp	hackerone	2025-10-22 16:52
	Asset Added: SOURCE_CODE: www.github.com/cosmos/evm	In Scope	https://hackerone.com/cosmos	hackerone	2025-10-22 16:37
+	Program Added		https://app.intigriti.c...rgamma/intergamma/detail	intigriti	2025-10-22 15:00
Associated Assets: IOS: 949829216 IOS: 950680989 IOS: 950693949 ANDROID: be.gamma.app.android WILDCARD: kassa.gamma.be/* WILDCARD: kassa.gamma.nl/* WILDCARD: kassa.karwei.nl/* WILDCARD: mijn.gamma.be/* WILDCARD: mijn.gamma.nl/* WILDCARD: mijn.karwei.nl/* ANDROID: nl.gamma.app.android ANDROID: nl.karwei.app.android WILDCARD: www.gamma.be/* WILDCARD: www.gamma.nl/* WILDCARD: www.karwei.nl/* WILDCARD: .gamma.be/ WILDCARD: .gamma.nl/ WILDCARD: .intergamma.cloud WILDCARD: .intergamma.nl/* WILDCARD: .karwei.nl/ WILDCARD: .restintergamma.nl IOS: 1558129454 WILDCARD: .intergamma-test.nl WILDCARD: .werkenbijgamma.be WILDCARD: .werkenbijgamma.nl WILDCARD: .werkenbijkarwei.nl WILDCARD: .configuratoren.nl/* URL: afspraakmaken.gamma.nl URL: api.afspraakmaken.gamma.be URL: api.afspraakmaken.gamma.nl URL: api.maakafspraak.karwei.nl OTHER: Everything related to configurators, both on primary as other domains URL: horrenconfigurator-fr.gamma.be URL: horrenconfigurator-nl.gamma.be URL: horrenconfigurator.karwei.nl URL: karwei-2018.hetmooistegordijn.nl URL: maakafspraak.karwei.nl URL: mail.gamma.be URL: mail.gamma.nl URL: mail.karwei.nl
+	Program Removed		https://app.intigriti.c...rgamma/intergamma/detail	intigriti	2025-10-22 14:00
Associated Assets: IOS: 949829216 IOS: 950680989 IOS: 950693949 ANDROID: be.gamma.app.android WILDCARD: kassa.gamma.be/* WILDCARD: kassa.gamma.nl/* WILDCARD: kassa.karwei.nl/* WILDCARD: mijn.gamma.be/* WILDCARD: mijn.gamma.nl/* WILDCARD: mijn.karwei.nl/* ANDROID: nl.gamma.app.android ANDROID: nl.karwei.app.android WILDCARD: www.gamma.be/* WILDCARD: www.gamma.nl/* WILDCARD: www.karwei.nl/* WILDCARD: .gamma.be/ WILDCARD: .gamma.nl/ WILDCARD: .intergamma.cloud WILDCARD: .intergamma.nl/* WILDCARD: .karwei.nl/ WILDCARD: .restintergamma.nl IOS: 1558129454 WILDCARD: .intergamma-test.nl WILDCARD: .werkenbijgamma.be WILDCARD: .werkenbijgamma.nl WILDCARD: .werkenbijkarwei.nl WILDCARD: .configuratoren.nl/* URL: afspraakmaken.gamma.nl URL: api.afspraakmaken.gamma.be URL: api.afspraakmaken.gamma.nl URL: api.maakafspraak.karwei.nl OTHER: Everything related to configurators, both on primary as other domains URL: horrenconfigurator-fr.gamma.be URL: horrenconfigurator-nl.gamma.be URL: horrenconfigurator.karwei.nl URL: karwei-2018.hetmooistegordijn.nl URL: maakafspraak.karwei.nl URL: mail.gamma.be URL: mail.gamma.nl URL: mail.karwei.nl
+	Program Added		https://hackerone.com/cosmos	hackerone	2025-10-22 11:47
Associated Assets: SOURCE_CODE: https://github.com/cosmos/iavl SOURCE_CODE: https://github.com/iqlusioninc/yubihsm.rs SOURCE_CODE: https://github.com/iqlusioninc/tmkms SOURCE_CODE: https://github.com/iqlusioninc/crates/tree/main/signatory SOURCE_CODE: https://github.com/cosmos/ledger-cosmos SOURCE_CODE: https://github.com/cosmos/gaia SOURCE_CODE: https://github.com/cosmos/ics23 OTHER: CosmWasm OTHER: Packet Forward Middleware OTHER: CometBFT OTHER: Cosmos SDK OTHER: ibc-go OTHER: Horcrux OTHER: Hermes Relayer OTHER: IBC Go Relayer OTHER: Solidity IBC Eureka SOURCE_CODE: https://github.com/skip-mev/go-fast-contracts
+	Program Added		https://app.intigriti.c...rgamma/intergamma/detail	intigriti	2025-10-22 11:30
Associated Assets: IOS: 949829216 IOS: 950680989 IOS: 950693949 ANDROID: be.gamma.app.android WILDCARD: kassa.gamma.be/* WILDCARD: kassa.gamma.nl/* WILDCARD: kassa.karwei.nl/* WILDCARD: mijn.gamma.be/* WILDCARD: mijn.gamma.nl/* WILDCARD: mijn.karwei.nl/* ANDROID: nl.gamma.app.android ANDROID: nl.karwei.app.android WILDCARD: www.gamma.be/* WILDCARD: www.gamma.nl/* WILDCARD: www.karwei.nl/* WILDCARD: .gamma.be/ WILDCARD: .gamma.nl/ WILDCARD: .intergamma.cloud WILDCARD: .intergamma.nl/* WILDCARD: .karwei.nl/ WILDCARD: .restintergamma.nl IOS: 1558129454 WILDCARD: .intergamma-test.nl WILDCARD: .werkenbijgamma.be WILDCARD: .werkenbijgamma.nl WILDCARD: .werkenbijkarwei.nl WILDCARD: .configuratoren.nl/* URL: afspraakmaken.gamma.nl URL: api.afspraakmaken.gamma.be URL: api.afspraakmaken.gamma.nl URL: api.maakafspraak.karwei.nl OTHER: Everything related to configurators, both on primary as other domains URL: horrenconfigurator-fr.gamma.be URL: horrenconfigurator-nl.gamma.be URL: horrenconfigurator.karwei.nl URL: karwei-2018.hetmooistegordijn.nl URL: maakafspraak.karwei.nl URL: mail.gamma.be URL: mail.gamma.nl URL: mail.karwei.nl
+	Program Removed		https://app.intigriti.c...rgamma/intergamma/detail	intigriti	2025-10-22 10:00
Associated Assets: IOS: 949829216 IOS: 950680989 IOS: 950693949 ANDROID: be.gamma.app.android WILDCARD: kassa.gamma.be/* WILDCARD: kassa.gamma.nl/* WILDCARD: kassa.karwei.nl/* WILDCARD: mijn.gamma.be/* WILDCARD: mijn.gamma.nl/* WILDCARD: mijn.karwei.nl/* ANDROID: nl.gamma.app.android ANDROID: nl.karwei.app.android WILDCARD: www.gamma.be/* WILDCARD: www.gamma.nl/* WILDCARD: www.karwei.nl/* WILDCARD: .gamma.be/ WILDCARD: .gamma.nl/ WILDCARD: .intergamma.cloud WILDCARD: .intergamma.nl/* WILDCARD: .karwei.nl/ WILDCARD: .restintergamma.nl IOS: 1558129454 WILDCARD: .intergamma-test.nl WILDCARD: .werkenbijgamma.be WILDCARD: .werkenbijgamma.nl WILDCARD: .werkenbijkarwei.nl WILDCARD: .configuratoren.nl/* URL: afspraakmaken.gamma.nl URL: api.afspraakmaken.gamma.be URL: api.afspraakmaken.gamma.nl URL: api.maakafspraak.karwei.nl OTHER: Everything related to configurators, both on primary as other domains URL: horrenconfigurator-fr.gamma.be URL: horrenconfigurator-nl.gamma.be URL: horrenconfigurator.karwei.nl URL: karwei-2018.hetmooistegordijn.nl URL: maakafspraak.karwei.nl URL: mail.gamma.be URL: mail.gamma.nl URL: mail.karwei.nl
+	Program Removed		https://app.intigriti.c...euven/mobile+apps/detail	intigriti	2025-10-22 08:30
Associated Assets: OTHER: 134.58.179.82 ANDROID: be.nexuzhealth.mobile.cpv ANDROID: be.nexuzhealth.mobile.kws ANDROID: be.nexuzhealth.mobile.mynexuz URL: forms.nexuzhealth.be URL: idp-mobile.nexuzhealth.be IOS: kws-companion/id1342124012 URL: mobile.nexuzhealth.be URL: mynexuz.be URL: mynexuz.be/myUZ/ IOS: mynexuzhealth/id1459856321 URL: https://www.nexuzhealth.com/nl/mynexuzhealthpro
+	Program Added		https://app.intigriti.c.../privatebankdelen/detail	intigriti	2025-10-22 08:00
Associated Assets: URL: api.digital.delen.be URL: api.digital.delen.lu URL: app.delen.be URL: app.delen.ch URL: app.delen.lu URL: auth.digital.delen.be URL: auth.digital.delen.lu ANDROID: be.delen.digital IOS: delen/id1064839588 URL: login.delen.be URL: login.delen.ch URL: login.delen.lu URL: login.oyens.com URL: status.delen.be URL: sts.delen.be URL: www.cadelam.be URL: www.cadelux.lu/en URL: www.delen.bank URL: www.delen.be/en

Scope Updates

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets: