Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
133
Disclosed reports
4
Subdomains
3,641
Vendor on CyberSIXT
OPPO (24 CVEs, 0 exploited)

Most upvoted reports4

Most upvoted reports of OPPO
ReportWeaknessDisclosedBountyVotes
Arbitrary thread deletion on c.realme.com#869705Insecure Direct Object Reference–$60073
Information Disclosure at https://portal.finzfin.com/1.txt#1011073Information Disclosure–$5020
No rate limit on Reporting a Threat on [https://community.coloros.com] lead to Increase in the User Group/Points#887684Input Validation and Logic–$10014
RXSS in https://store.oppomobile.com/#869870Cross-site Scripting–$10010

Subdomains3,641

Subdomains of OPPO
NameScopeFirst seen
netstage.foro.0-database.oppofind.comdataNot in the scope2026-11-14
cnn.redirectme.netoppofind.0-ejemplo.oppofind.comNot in the scope2026-11-14
pm.redirectme.netoppofind.0-ejemplo.oppofind.comNot in the scope2026-11-14
bvrv557agi6fer19fnsg.redirectme.netoppofind.0-netoppofind-wisconsin-ecppofind.oppofind.comNot in the scope2026-11-14
redirectme.netoppofindruleus.jpw6qr-mirror.16.1.0.oppofind.comNot in the scope2026-11-14
redirectme.netoppofindruleus-admin1.jpw6qr.16.1.0.oppofind.comadminNot in the scope2026-11-14
redirectme.netoppofindruleus.jpw6qr.16.1.0.oppofind.comNot in the scope2026-11-14
redirectme.netoppofind.dcbawwwrepair.2.1.0.oppofind.comNot in the scope2026-11-14
redirectme.netoppofindstage1.dcbawwwrepair.2.1.0.oppofind.comNot in the scope2026-11-14
redirectme.netoppofind-cba9876543210zyxw.2.1.0.oppofind.comNot in the scope2026-11-14
webservices.redirectme.netoppofind-cba9876543210zyxw.2.1.0.oppofind.comapiNot in the scope2026-11-14
redirectme.netoppofind-cba9876543210zyxw.partner.2.1.0.oppofind.comNot in the scope2026-11-14
redirectme.neteuproxyoppofind-cba9876543210zyxw.trial.2.1.0.oppofind.comNot in the scope2026-11-14
redirectme.netoppofind.14.data.1.0.oppofind.comNot in the scope2026-11-14
redirectme.netoppofind.gw.1.0.oppofind.comNot in the scope2026-11-14
bvs84irkvfpdbio14klg.webproxy.idcjoy.jobs-bdjobs-com.jobs-bdjobs-comacceptksiegarnia-wwwteam.1.0.oppofind.comNot in the scope2026-11-14
redirectme.netoppofind.oarwww.lax1.1.0.oppofind.comNot in the scope2026-11-14
webproxy.idcjoy.16ids.team.1.0.oppofind.comNot in the scope2026-11-14
webproxy.idcjoy.4-apriljobs.team.1.0.oppofind.comNot in the scope2026-11-14
webproxy.idcjoy.4-skins.team.1.0.oppofind.comNot in the scope2026-11-14
webproxy.idcjoy-7.a-ids.team.1.0.oppofind.comNot in the scope2026-11-14
webproxy.idcjoy.a-ids.team.1.0.oppofind.comNot in the scope2026-11-14
webproxy.idcjoy.a-idsuat.team.1.0.oppofind.comNot in the scope2026-11-14
webproxy.idcjoy.access.team.1.0.oppofind.comvpnNot in the scope2026-11-14
webproxy.idcjoy.apriljobs.team.1.0.oppofind.comNot in the scope2026-11-14
webproxy.idcjoyteam.apriljobs.team.1.0.oppofind.comNot in the scope2026-11-14
webproxy.idcjoy.apriljobs.cn.team.1.0.oppofind.comNot in the scope2026-11-14
webproxy.idcjoy.ebs.team.1.0.oppofind.comNot in the scope2026-11-14
webproxy.idcjoy.ids-mail.team.1.0.oppofind.commailNot in the scope2026-11-14
webproxy.idcjoy-global.ids-uat.team.1.0.oppofind.comtestNot in the scope2026-11-14
webproxy.idcjoy.ids-uat.team.1.0.oppofind.comtestNot in the scope2026-11-14
webproxy.idcjoyapidocs.ids-uat.team.1.0.oppofind.comtestNot in the scope2026-11-14
webproxy.idcjoy-12.ids.team.1.0.oppofind.comNot in the scope2026-11-14
webproxy.idcjoy-accounts.ids.team.1.0.oppofind.comNot in the scope2026-11-14
webproxy.idcjoy-cdn.ids.team.1.0.oppofind.comNot in the scope2026-11-14
webproxy.idcjoy.ids.team.1.0.oppofind.comNot in the scope2026-11-14
webproxy.idcjoy1.ids.team.1.0.oppofind.comNot in the scope2026-11-14
webproxy.idcjoykor.ids.team.1.0.oppofind.comNot in the scope2026-11-14
webproxy.idcjoy.idsstaff.team.1.0.oppofind.comNot in the scope2026-11-14
bvrvcmjkvfp7e7mh77hg.webproxy.idcjoy-2009.jobs-bdjobs-com.team.1.0.oppofind.comNot in the scope2026-11-14
bvrutvuuc7d2oo8i02n0.webproxy.idcjoygermany.jobs-bdjobs-com.team.1.0.oppofind.comNot in the scope2026-11-14
webproxy.idcjoy.oarwww-uat.team.1.0.oppofind.comtestNot in the scope2026-11-14
webproxy.idcjoy.origin.team.1.0.oppofind.comNot in the scope2026-11-14
webproxy.idcjoy1.skinsids.team.1.0.oppofind.comNot in the scope2026-11-14
webproxy.idcjoy.tapriljobs.team.1.0.oppofind.comNot in the scope2026-11-14
webproxy.idcjoy.vpn-kor-jobs-bdjobs-com.domaincp.teamrhodeisland-edge.1.0.oppofind.comvpnNot in the scope2026-11-14
webproxy.idcjoy.kor-jobs-bdjobs-com.teamrhodeisland-edge.1.0.oppofind.comNot in the scope2026-11-14
redirectme.netoppofind.v1.1.0.oppofind.comNot in the scope2026-11-14
redirectme.netoppofind.comassets2.w3.1.0.oppofind.comNot in the scope2026-11-14
bvs8933kvfp6323nojng.redirectme.netoppofind.wvutsr9jpw6qr.16.0.oppofind.comNot in the scope2026-11-14
cbds.redirectme.netoppofind-0-compaginas6543210zyxw.2.0.oppofind.comNot in the scope2026-11-14
bvrusirkvfpdiqbfkb9g.sweetie.redirectme.netoppofind-cba9876543210zyxw.2.0.oppofind.comNot in the scope2026-11-14
bvs8amngk4meisciamc0.redirectme.netoppofind-cba9876543hw.2.0.oppofind.comNot in the scope2026-11-14
bvrv1njpg8njqccni44g.redirectme.netoppofind-kjihgfedcba98765432.2.0.oppofind.comNot in the scope2026-11-14
udp.redirectme.netoppofind.2.0.oppofind.comNot in the scope2026-11-14
bvrvp4jpg8nnc7do0mug.redirectme.netoppofind-cba9876543210zyxw.trialskins.2.0.oppofind.comNot in the scope2026-11-14
team.auth.0.oppofind.comauthNot in the scope2026-11-14
bvrvuifgk4mcamq2vh90.webproxy.idcjoy-gist.jobs-bdjobs-com.team.auth.0.oppofind.comauthNot in the scope2026-11-14
bvrvuifgk4mcamq30bp0.webproxy.idcjoy-gist.jobs-bdjobs-com.team.auth.0.oppofind.comauthNot in the scope2026-11-14
bvrvcvvagi6dbtaos2i0.redirectme.netoppofind.comk8s-prd.b.0.oppofind.comNot in the scope2026-11-14
bvrvgj7gk4m11jl8ssdg.webproxy.idcjoy.jobs-bdjobs-com.team.cdn.0.oppofind.comNot in the scope2026-11-14
bvs83lrkvfp0teh6882g.redirectme.netoppofind.jpw6qr.cn.0.oppofind.comNot in the scope2026-11-14
controlnginx.0.oppofind.comNot in the scope2026-11-14
bvrv0j3pg8nucc0pct3g.redirectme.netoppofind.devops.0.oppofind.comNot in the scope2026-11-14
bvrv74euc7d6aes0eeqg.redirectme.netoppofind.docs.0.oppofind.comNot in the scope2026-11-14
webproxy.idcjoy.jobs-aws-jobs-loadbalancer-comk8s-dev-comyountselegorysistmall.service-merchant-0.europewest.0.oppofind.comdevNot in the scope2026-11-14
rulegodosoft-022facebookapp-xsrvjpinsys-staging.app.joyoppofind.0.oppofind.comstagingNot in the scope2026-11-14
bvrv25fagi6fgudvdjgg.r0.rulegodosoft-022facebookapp-xsrvjpinsys-staging.app.joyoppofind.0.oppofind.comstagingNot in the scope2026-11-14
bvs80pngk4meneh762lg.redirectme.netoppofind.kr.0.oppofind.comNot in the scope2026-11-14
bvs80pngk4meneh76gpg.redirectme.netoppofind.kr.0.oppofind.comNot in the scope2026-11-14
bvs41djpg8nrdme54tgg.webproxy.idcjoy.jobs-bdjobs-com.ksiegarniaww-team-org.0.oppofind.comNot in the scope2026-11-14
bvrvp3muc7d7q3bcikng.redirectme.netoppofind.merch.0.oppofind.comNot in the scope2026-11-14
bvrvp6euc7d2ids3aprg.redirectme.netoppofind.merch.0.oppofind.comNot in the scope2026-11-14
qps1.redirectme.net-rmary.0.oppofind.comNot in the scope2026-11-14
hudong.redirectme.net.0.oppofind.comNot in the scope2026-11-14
bvrven3kvfp4pratvfp0.disabled.redirectme.netoppofind.0.oppofind.comNot in the scope2026-11-14
webrd04.uploads.redirectme.netoppofind.0.oppofind.comdataNot in the scope2026-11-14
www1.redirectme.netstage.0.oppofind.comNot in the scope2026-11-14
bvrutqeuc7d3dhbo991g.redirectme.netupload.0.oppofind.comNot in the scope2026-11-14
bvrutqeuc7d3dhbo9p1g.redirectme.netupload.0.oppofind.comNot in the scope2026-11-14
bvrutqeuc7d3dhbo9v80.redirectme.netupload.0.oppofind.comNot in the scope2026-11-14
bvrutqeuc7d3dhbo9vb0.redirectme.netupload.0.oppofind.comNot in the scope2026-11-14
mpurchasing.redirectme.netupload.0.oppofind.comNot in the scope2026-11-14
quark.redirectme.netupload.0.oppofind.comNot in the scope2026-11-14
oidgeructiontasks-api-docs.0.oppofind.comapiNot in the scope2026-11-14
bvs88inagi6cd6hi6kh0.redirectme.netoppofind.community4arab.pc.0.oppofind.comNot in the scope2026-11-14
bvrusibpg8nmjl0217k0.redirectme.redirectme.netoppofind.promo.0.oppofind.comNot in the scope2026-11-14
bvs3tnde0shm4b4b5p00.redirectme.netoppofind.securepaywall-netoveryound.0.oppofind.comNot in the scope2026-11-14
ldap.redirectme.netoppofind.skins.0.oppofind.comNot in the scope2026-11-14
bvrv5rrpg8njv2gibdfg.webproxy.idcjoy.reset.team-getter.0.oppofind.comNot in the scope2026-11-14
bvrvo8uuc7d2claacjpg.webproxy.idcjoy.2009jobs-bdjobs-com.team.0.oppofind.comNot in the scope2026-11-14
bvruq5rkvfp7q3ukg5lg.webproxy.idcjoy.comgetterment.team.0.oppofind.comNot in the scope2026-11-14
bvs3rsngk4mfid0c23mg.webproxy.idcjoy.comgetterment.team.0.oppofind.comNot in the scope2026-11-14
bvs4cf3kvfpe7kdcf490.webproxy.idcjoy-applications.community4arabteamgetjobs-asana-com.team.0.oppofind.comNot in the scope2026-11-14
jobs-bdjobs-com-applications.team.0.oppofind.comNot in the scope2026-11-14
bvrv10vagi6fg6etqor0.suppliexprendyol-univer.webproxy.idcjoy.jobs-bdjobs-com-applications.team.0.oppofind.comNot in the scope2026-11-14
bvrvehjpg8nunjrjbf4g.webproxy.idcjoy.2011.jobs-bdjobs-com.team.0.oppofind.comNot in the scope2026-11-14
bvrvt07agi6cj9t873l0.nf-1earwwwbucket.webproxy.idcjoy-7earwww.jobs-bdjobs-com.team.0.oppofind.comNot in the scope2026-11-14
bvrvbqmuc7dceqhsmjk0.github.webproxy.idcjoy.jobs-bdjobs-com.team.0.oppofind.comgitNot in the scope2026-11-14
bvrva1uuc7d35sr0jf9g.webproxy.idcjoylax1.jobs-bdjobs-com.team.0.oppofind.comNot in the scope2026-11-14

16 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.