Skip to content
Connect AISign inSign up free

Bug bounty program

OP

OPPO

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
133
Disclosed reports
4
Subdomains
3,641
Vendor on CyberSIXT
OPPO (24 CVEs, 0 exploited)

Most upvoted reports4

Most upvoted reports of OPPO
ReportWeaknessDisclosedBountyVotes
Arbitrary thread deletion on c.realme.com#869705Insecure Direct Object Reference–$60073
Information Disclosure at https://portal.finzfin.com/1.txt#1011073Information Disclosure–$5020
No rate limit on Reporting a Threat on [https://community.coloros.com] lead to Increase in the User Group/Points#887684Input Validation and Logic–$10014
RXSS in https://store.oppomobile.com/#869870Cross-site Scripting–$10010

Subdomains3,641

Root:oppo.com
Scope
Name suggests
First seen
Text fileClear filters230 names
Subdomains of OPPO
NameScopeFirst seen
2fcommunityin.oppo.comNot in the scope2026-11-14
account.oppo.comNot in the scope2026-11-14
www.account.oppo.comNot in the scope2026-11-14
activity.oppo.comNot in the scope2026-11-14
address.oppo.comNot in the scope2026-11-14
after-sales.address.oppo.comNot in the scope2026-11-14
after-sales.oppo.comNot in the scope2026-11-14
andes.oppo.comNot in the scope2026-11-14
t.aquila.oppo.comNot in the scope2026-11-14
autodiscover.oppo.commailNot in the scope2026-11-14
bbs.oppo.comNot in the scope2026-11-14
bbsfs.oppo.comNot in the scope2026-11-14
bbspre.oppo.comNot in the scope2026-11-14
bdev.oppo.comNot in the scope2026-11-14
bshop.oppo.comNot in the scope2026-11-14
business.oppo.comNot in the scope2026-11-14
campus.oppo.comNot in the scope2026-11-14
career.oppo.comNot in the scope2026-11-14
careers.oppo.comNot in the scope2026-11-14
ccp.oppo.comNot in the scope2026-11-14
chat.oppo.comNot in the scope2026-11-14
chat-eu.oppo.comNot in the scope2026-11-14
chat-in.oppo.comNot in the scope2026-11-14
chat-sg.oppo.comNot in the scope2026-11-14
chat-support.oppo.comNot in the scope2026-11-14
chat-support-eu.oppo.comNot in the scope2026-11-14
cloud.oppo.comIn scope2026-11-14
cloud-test.oppo.comtestNot in the scope2026-11-14
cms.oppo.comadminNot in the scope2026-11-14
code.oppo.comNot in the scope2026-11-14
community.oppo.comIn scope2026-11-14
account.community.oppo.comNot in the scope2026-11-14
communityin.oppo.comIn scope2026-11-14
communityin-web.oppo.comNot in the scope2026-11-14
communitymy.oppo.comNot in the scope2026-11-14
connect.oppo.comNot in the scope2026-11-14
connect-pc.oppo.comNot in the scope2026-11-14
crm.oppo.comNot in the scope2026-11-14
cszsk.oppo.comNot in the scope2026-11-14
design.oppo.comNot in the scope2026-11-14
designer.oppo.comNot in the scope2026-11-14
dl.oppo.comNot in the scope2026-11-14
downloads.oppo.comNot in the scope2026-11-14
assorted.downloads.oppo.comNot in the scope2026-11-14
drm.oppo.comNot in the scope2026-11-14
dsfs.oppo.comNot in the scope2026-11-14
dz.oppo.comNot in the scope2026-11-14
e.oppo.comIn scope2026-11-14
eftp.oppo.comNot in the scope2026-11-14
eg.oppo.comNot in the scope2026-11-14
email.oppo.comNot in the scope2026-11-14
en.oppo.comNot in the scope2026-11-14
enjoy.oppo.comNot in the scope2026-11-14
eurwarranty.oppo.comNot in the scope2026-11-14
events.oppo.comNot in the scope2026-11-14
exapi.oppo.comNot in the scope2026-11-14
cloudpic.exapi.oppo.comNot in the scope2026-11-14
daohang.exapi.oppo.comNot in the scope2026-11-14
icontact.exapi.oppo.comNot in the scope2026-11-14
isms.exapi.oppo.comNot in the scope2026-11-14
itheme.exapi.oppo.comNot in the scope2026-11-14
syncfs.exapi.oppo.comNot in the scope2026-11-14
theme.exapi.oppo.comNot in the scope2026-11-14
d.theme.exapi.oppo.comNot in the scope2026-11-14
i.theme.exapi.oppo.comNot in the scope2026-11-14
expe1.oppo.comNot in the scope2026-11-14
www.expe1.oppo.comNot in the scope2026-11-14
expe2.oppo.comNot in the scope2026-11-14
file.oppo.comNot in the scope2026-11-14
find.oppo.comNot in the scope2026-11-14
findphone.oppo.comNot in the scope2026-11-14
findphonefs.oppo.comNot in the scope2026-11-14
findv1.oppo.comNot in the scope2026-11-14
fs.oppo.comNot in the scope2026-11-14
ftp.oppo.comdataNot in the scope2026-11-14
ftpex.oppo.comNot in the scope2026-11-14
fuwu.oppo.comNot in the scope2026-11-14
gcss-robot.oppo.comNot in the scope2026-11-14
gkm.oppo.comNot in the scope2026-11-14
gkm-cn.oppo.comNot in the scope2026-11-14
gkm-portal.oppo.comNot in the scope2026-11-14
gkm-portal-sg.oppo.comNot in the scope2026-11-14
gkm-s3cdn-sg.oppo.comNot in the scope2026-11-14
global.oppo.comNot in the scope2026-11-14
go.oppo.comNot in the scope2026-11-14
gray-push-intl.oppo.comNot in the scope2026-11-14
t.gw.oppo.comNot in the scope2026-11-14
hd.oppo.comNot in the scope2026-11-14
hellowatch.oppo.comNot in the scope2026-11-14
hio.oppo.comNot in the scope2026-11-14
hr.oppo.comNot in the scope2026-11-14
hwimap.oppo.comNot in the scope2026-11-14
iapp.oppo.comNot in the scope2026-11-14
id.oppo.comIn scope2026-11-14
ieurwarranty.oppo.comNot in the scope2026-11-14
im.oppo.comNot in the scope2026-11-14
image.oppo.comNot in the scope2026-11-14
imagine-if.oppo.comNot in the scope2026-11-14
imap.oppo.commailNot in the scope2026-11-14
ind-sow-cms.oppo.comadminNot in the scope2026-11-14

16 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated