Bug bounty program
MA
Mars
Most upvoted reports68
All reports| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Account Takeover in Password Reset FunctionAnalysed#3228888 | Authentication | 2025-09-02 | – | 105 |
| Reflected HTML Injection via contact (faq) search parameter on ██████████Analysed#2587101 | Cross-site Scripting | 2024-11-25 | – | 103 |
| █████████ when adding branches to your accountAnalysed#2756402 | Insecure Direct Object Reference | 2024-11-26 | – | 98 |
| Reflected HTML Injection via contact (faq) search parameter on ███]=Analysed#2578985 | Cross-site Scripting | 2024-11-25 | – | 82 |
| Unrestricted File Upload at ██████████Analysed#2357778 | File and Path Handling | 2024-02-19 | – | 78 |
| sqli on █████████ search functionalityAnalysed#2446550 | SQL Injection | 2024-06-25 | – | 72 |
| CVE-█████-35813 in █████Analysed#2200329 | File and Path Handling | 2026-02-24 | – | 71 |
| RXSS on ██████ via customerId parameterAnalysed#3126603 | Cross-site Scripting | 2025-07-28 | – | 71 |
| Unauthenticated Sensitive Information Disclosure on █████████ CVE-2021-38314Analysed#1452774 | Information Disclosure | 2025-09-02 | – | 67 |
| Upload profile photo and Pets addition - IDORAnalysed#2393021 | Insecure Direct Object Reference | 2024-11-21 | – | 66 |
Subdomains3,528
| Name | Scope | First seen |
|---|---|---|
| 665823-web1.royalcanin.com | In scope | 2026-11-14 |
| 665824-db1.royalcanin.com | In scope | 2026-11-14 |
| click.a.royalcanin.com | In scope | 2026-11-14 |
| cloud.a.royalcanin.com | In scope | 2026-11-14 |
| image.a.royalcanin.com | In scope | 2026-11-14 |
| view.a.royalcanin.com | In scope | 2026-11-14 |
| academy.royalcanin.com | In scope | 2026-11-14 |
| home.academy.royalcanin.com | In scope | 2026-11-14 |
| www.home.academy.royalcanin.com | In scope | 2026-11-14 |
| staging.academy.royalcanin.comstaging | In scope | 2026-11-14 |
| wildcard.academy.royalcanin.com | In scope | 2026-11-14 |
| account.royalcanin.com | In scope | 2026-11-14 |
| url5153.account.royalcanin.com | In scope | 2026-11-14 |
| www.account.royalcanin.com | In scope | 2026-11-14 |
| accountdev.royalcanin.com | In scope | 2026-11-14 |
| www.accountdev.royalcanin.com | In scope | 2026-11-14 |
| accountpreview.royalcanin.com | In scope | 2026-11-14 |
| www.accountpreview.royalcanin.com | In scope | 2026-11-14 |
| admin.royalcanin.comadmin | In scope | 2026-11-14 |
| admin-dev.royalcanin.comadmin, dev | In scope | 2026-11-14 |
| www.admin-dev.royalcanin.comadmin, dev | In scope | 2026-11-14 |
| admin-preview.royalcanin.comadmin, staging | In scope | 2026-11-14 |
| www.admin-preview.royalcanin.comadmin, staging | In scope | 2026-11-14 |
| admin-signin.royalcanin.comadmin, auth | In scope | 2026-11-14 |
| www.admin-signin.royalcanin.comadmin, auth | In scope | 2026-11-14 |
| www.admin.royalcanin.comadmin | In scope | 2026-11-14 |
| adminsit.royalcanin.com | In scope | 2026-11-14 |
| www.adminsit.royalcanin.com | In scope | 2026-11-14 |
| adminuat.royalcanin.com | In scope | 2026-11-14 |
| www.adminuat.royalcanin.com | In scope | 2026-11-14 |
| adminus.royalcanin.com | In scope | 2026-11-14 |
| www.adminus.royalcanin.com | In scope | 2026-11-14 |
| adminvfu.royalcanin.com | In scope | 2026-11-14 |
| adoption.royalcanin.com | In scope | 2026-11-14 |
| adoption-platform.royalcanin.com | In scope | 2026-11-14 |
| origin.adoption.royalcanin.com | In scope | 2026-11-14 |
| preprod.adoption.royalcanin.comstaging | In scope | 2026-11-14 |
| www.preprod.adoption.royalcanin.comstaging | In scope | 2026-11-14 |
| stage.adoption.royalcanin.comstaging | In scope | 2026-11-14 |
| origin.stage.adoption.royalcanin.comstaging | In scope | 2026-11-14 |
| www.adoption.royalcanin.com | In scope | 2026-11-14 |
| alb-redirect.royalcanin.com | In scope | 2026-11-14 |
| analytics-gtm.royalcanin.com | In scope | 2026-11-14 |
| parcel-api.anz.royalcanin.comapi | In scope | 2026-11-14 |
| parcel-cdn.anz.royalcanin.com | In scope | 2026-11-14 |
| click.ap.royalcanin.com | In scope | 2026-11-14 |
| cloud.ap.royalcanin.com | In scope | 2026-11-14 |
| image.ap.royalcanin.com | In scope | 2026-11-14 |
| view.ap.royalcanin.com | In scope | 2026-11-14 |
| api.royalcanin.comapi | In scope | 2026-11-14 |
| dev.api.royalcanin.comapi, dev | In scope | 2026-11-14 |
| www.dev.api.royalcanin.comapi, dev | In scope | 2026-11-14 |
| tst.api.royalcanin.comapi | In scope | 2026-11-14 |
| www.tst.api.royalcanin.comapi | In scope | 2026-11-14 |
| www.api.royalcanin.comapi | In scope | 2026-11-14 |
| apply.royalcanin.com | In scope | 2026-11-14 |
| www.apply.royalcanin.com | In scope | 2026-11-14 |
| stg.asia.royalcanin.comstaging | In scope | 2026-11-14 |
| open.stg.asia.royalcanin.comstaging | In scope | 2026-11-14 |
| store.stg.asia.royalcanin.comstaging | In scope | 2026-11-14 |
| acceptationrms.extranet.azreus2-azrwus1-id-gslb.royalcanin.cominternal | In scope | 2026-11-14 |
| vital.azreus2-azrwus1-id-gslb.royalcanin.com | In scope | 2026-11-14 |
| pp-us-b2bws.azreus2-id-gslb.royalcanin.com | In scope | 2026-11-14 |
| us-b2bws.azreus2-id-gslb.royalcanin.com | In scope | 2026-11-14 |
| b2b-signin.royalcanin.comauth | In scope | 2026-11-14 |
| b2b-signin-dev.royalcanin.comauth, dev | In scope | 2026-11-14 |
| b2b-signin-stg.royalcanin.comauth, staging | In scope | 2026-11-14 |
| backstage.royalcanin.com | In scope | 2026-11-14 |
| backstage-dev.royalcanin.comdev | In scope | 2026-11-14 |
| brasil.royalcanin.com | In scope | 2026-11-14 |
| breed.royalcanin.com | In scope | 2026-11-14 |
| breed-match-tool.royalcanin.com | In scope | 2026-11-14 |
| breeder.royalcanin.com | In scope | 2026-11-14 |
| www.breeder.royalcanin.com | In scope | 2026-11-14 |
| breedevents.royalcanin.com | In scope | 2026-11-14 |
| businesscare.royalcanin.com | In scope | 2026-11-14 |
| campustour.royalcanin.com | In scope | 2026-11-14 |
| careers.royalcanin.com | In scope | 2026-11-14 |
| www.careers.royalcanin.com | In scope | 2026-11-14 |
| cats.royalcanin.com | In scope | 2026-11-14 |
| cd-academy-prd-weu-01.royalcanin.com | In scope | 2026-11-14 |
| cd-academy-prd-weu-02.royalcanin.com | In scope | 2026-11-14 |
| cd-sc-prd-weu-01.royalcanin.com | In scope | 2026-11-14 |
| cd-sc-prd-weu-02.royalcanin.com | In scope | 2026-11-14 |
| cdf.royalcanin.com | In scope | 2026-11-14 |
| link.cdf.royalcanin.com | In scope | 2026-11-14 |
| chat.royalcanin.com | In scope | 2026-11-14 |
| as.chat.royalcanin.com | In scope | 2026-11-14 |
| download.chat.royalcanin.com | In scope | 2026-11-14 |
| chinacareers.royalcanin.com | In scope | 2026-11-14 |
| www.chinacareers.royalcanin.com | In scope | 2026-11-14 |
| ciamapi.royalcanin.com | In scope | 2026-11-14 |
| club.royalcanin.com | In scope | 2026-11-14 |
| cms.club.royalcanin.comadmin | In scope | 2026-11-14 |
| infobip.club.royalcanin.com | In scope | 2026-11-14 |
| cm-sc-prd-weu-01.royalcanin.com | In scope | 2026-11-14 |
| cmsuat.royalcanin.com | In scope | 2026-11-14 |
| commande-lareunion.royalcanin.com | In scope | 2026-11-14 |
| www.commande-lareunion.royalcanin.com | In scope | 2026-11-14 |
| connect.royalcanin.com | In scope | 2026-11-14 |
3,528 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.