Skip to content
BackEsc
Sign in

Xiaomi · in scope

Wildcard domains

43 assets in scope

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is an asset the program lists in scope. The first 17 are named here; the program's own page has the full scope.

Open Xiaomi on HackerOne

Every one of the 43 is a mark on the map. Named now: 1 to 17, as listed first.

  1. *.airstar-finance.comWildcard domains
  2. *.airstar.comWildcard domains
  3. *.airstarfinance.netWildcard domains
  4. *.aleenote.cnWildcard domains
  5. *.aleenote.comWildcard domains
  6. *.baoliyun.comWildcard domains
  7. *.duokan.comWildcard domains
  8. *.hongyuanib.comWildcard domains
  9. *.mi.cnWildcard domains
  10. *.mi.comWildcard domains
  11. *.mifile.cnWildcard domains
  12. *.migames.comWildcard domains
  13. *.miinsurtech.cnWildcard domains
  14. *.miinsurtech.comWildcard domains
  15. *.miinsurtech.netWildcard domains
  16. *.mijiayoupin.comWildcard domains
  17. *.mioffice.cnWildcard domains

paid a bounty

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in