Scope Updates
Recent changes to bug bounty program scopes.
| Change | Asset | Category | Scope | Program | Platform | Time |
|---|---|---|---|---|---|---|
| Removed | www.unibet.(com|it|se|co.uk|be|nl|dk|ro|fr|ee|ie|com.au|mt) | URL | In Scope | YesWeHack | 2025-11-24 14:30 | |
| Removed | payment.unibet.(com|it|se|co.uk|be|nl|dk|ro|fr|ee|ie|com.au|mt) | URL | In Scope | YesWeHack | 2025-11-24 14:30 | |
| Added | /blog/ (or translated equivalent) endpoints on our sites | URL | In Scope | YesWeHack | 2025-11-24 13:00 | |
| Removed | /blog/ endpoints on our sites | URL | In Scope | YesWeHack | 2025-11-24 13:00 | |
+Program Added | — | — | — | YesWeHack | 2025-11-24 10:30 | |
Associated Assets:OPEN-SOURCEhttps://github.com/bigbluebutton/bigbluebutton OPEN-SOURCEhttps://github.com/blindsidenetworks/scalelite OPEN-SOURCEhttps://github.com/bigbluebutton/bbb-webrtc-sfu OPEN-SOURCEhttps://github.com/bigbluebutton/bbb-webrtc-recorder OPEN-SOURCEhttps://github.com/bigbluebutton/greenlight OPEN-SOURCEhttps://github.com/bigbluebutton/bbb-presentation-video OPEN-SOURCEhttps://github.com/bigbluebutton/bbb-playback | ||||||
+Program Added | — | — | — | YesWeHack | 2025-11-24 09:01 | |
Associated Assets:OPEN-SOURCEhttps://github.com/jenkinsci/jenkins OPEN-SOURCEhttps://github.com/jenkinsci/stapler OPEN-SOURCEhttps://github.com/jenkinsci/jelly OPEN-SOURCEhttps://github.com/jenkinsci/winstone OPEN-SOURCEhttps://github.com/jenkinsci/script-security-plugin OPEN-SOURCEhttps://github.com/jenkinsci/credentials-plugin OPEN-SOURCEhttps://github.com/jenkinsci/credentials-binding-plugin OPEN-SOURCEhttps://github.com/jenkinsci/workflow-cps-plugin | ||||||
+Program Added | — | — | — | YesWeHack | 2025-11-24 09:01 | |
Associated Assets:OPEN-SOURCEhttps://github.com/ImageMagick/ImageMagick | ||||||
+Program Added | — | — | — | YesWeHack | 2025-11-24 09:01 | |
Associated Assets:OPEN-SOURCEhttps://gitlab.isc.org/isc-projects/bind9 | ||||||
+Program Removed | — | — | — | YesWeHack | 2025-11-18 11:01 | |
Associated Assets:URLt.swapcard.com URLapi.swapcard.com URLchat-api.swapcard.com/graphql URLdeveloper.swapcard.com/event-admin/graphql URLlogin.swapcard.com URLstudio-api.swapcard.com URLapp.swapcard.com URLstudio.swapcard.com URLteam.swapcard.com IOShttps://apps.apple.com/fr/app/swapcard/id879488719 ANDROIDhttps://play.google.com/store/apps/details?id=com.swapcard.apps.android&hl=fr URLimg.swapcard.com | ||||||
+Program Added | — | — | — | YesWeHack | 2025-11-18 09:00 | |
Associated Assets:OPEN-SOURCEkeycloak server OPEN-SOURCEkeycloak operator OPEN-SOURCEjavascript client adapter | ||||||
| Added | *.gaming.gopayapi.com | WILDCARD | In Scope | YesWeHack | 2025-11-11 03:30 | |
| Added | *.gofin.io | WILDCARD | In Scope | YesWeHack | 2025-11-11 03:30 | |
| Added | *.findaya.com | WILDCARD | In Scope | YesWeHack | 2025-11-11 03:30 | |
| Added | *.findaya.co.id | WILDCARD | In Scope | YesWeHack | 2025-11-11 03:30 | |
| Added | api.gobiz.co.id | URL | In Scope | YesWeHack | 2025-11-11 03:30 | |
| Added | *.gobiz.co.id | WILDCARD | In Scope | YesWeHack | 2025-11-11 03:30 | |
+Program Removed | — | — | — | YesWeHack | 2025-10-31 03:00 | |
Associated Assets:WILDCARD*.ncs.co WILDCARD*.dsanalytics.com WILDCARD*.dialog.com.au WILDCARD*.ncsimpact.co | ||||||
| Removed | *.okto.tech | URL | In Scope | YesWeHack | 2025-10-31 00:00 | |
| Added | euria.infomaniak.com | URL | In Scope | YesWeHack | 2025-10-31 00:00 | |
| Removed | https://login.decathlon.net/* | URL | In Scope | YesWeHack | 2025-10-23 12:00 | |
| Removed | https://account.decathlon.com/* | URL | In Scope | YesWeHack | 2025-10-23 12:00 | |
| Added | api.deezer.com | URL | In Scope | YesWeHack | 2025-10-20 15:30 | |
| Removed | api.deezer.com | URL | In Scope | YesWeHack | 2025-10-20 15:30 | |