Skip to content
BackEsc
Sign in

OPPO · in scope

Web applications

28 assets in scope

Out of date: the sync last ran 5 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is an asset the program lists in scope. The first 12 are named here; the program's own page has the full scope.

Open OPPO on HackerOne

Every one of the 28 is a mark on the map. Named now: 1 to 12, as listed first.

  1. http://open.oppomobile.comWeb applications
  2. https://c.realme.com/eg/Web applications
  3. https://c.realme.com/global/Web applications
  4. https://c.realme.com/id/Web applications
  5. https://c.realme.com/in/Web applications
  6. https://c.realme.com/ru/Web applications
  7. https://cloud.oppo.com/Web applications
  8. https://community.oppo.com/Web applications
  9. https://communityin.oppo.com/Web applications
  10. https://developers.oppomobile.com/Web applications
  11. https://drp.myoppo.com/Web applications
  12. https://e-global.heytap.com/marketing/loginWeb applications

paid a bounty

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in