Skip to content
Connect AISign inSign up free

Bug bounty program

OP

OPPO

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
133
Disclosed reports
4
Subdomains
3,641
Vendor on CyberSIXT
OPPO (24 CVEs, 0 exploited)

Most upvoted reports4

Most upvoted reports of OPPO
ReportWeaknessDisclosedBountyVotes
Arbitrary thread deletion on c.realme.com#869705Insecure Direct Object Reference–$60073
Information Disclosure at https://portal.finzfin.com/1.txt#1011073Information Disclosure–$5020
No rate limit on Reporting a Threat on [https://community.coloros.com] lead to Increase in the User Group/Points#887684Input Validation and Logic–$10014
RXSS in https://store.oppomobile.com/#869870Cross-site Scripting–$10010

Subdomains3,641

Root:oppomobile.com
Scope
Name suggests
First seen
Text fileClear filters381 names
Subdomains of OPPO
NameScopeFirst seen
123.oppomobile.comNot in the scope2026-11-14
ads.oppomobile.comNot in the scope2026-11-14
adx.ads.oppomobile.comNot in the scope2026-11-14
adx-id.ads.oppomobile.comNot in the scope2026-11-14
adx-in.ads.oppomobile.comNot in the scope2026-11-14
b1.ads.oppomobile.comNot in the scope2026-11-14
bdapi.ads.oppomobile.comNot in the scope2026-11-14
bdapi-id.ads.oppomobile.comNot in the scope2026-11-14
bdapi-in.ads.oppomobile.comNot in the scope2026-11-14
bjdata.ads.oppomobile.comNot in the scope2026-11-14
ck.ads.oppomobile.comNot in the scope2026-11-14
cm.ads.oppomobile.comNot in the scope2026-11-14
data.ads.oppomobile.comNot in the scope2026-11-14
data-cl-f.ads.oppomobile.comNot in the scope2026-11-14
data-cl-id.ads.oppomobile.comNot in the scope2026-11-14
data-cl-in.ads.oppomobile.comNot in the scope2026-11-14
data-f.ads.oppomobile.comNot in the scope2026-11-14
data-id.ads.oppomobile.comNot in the scope2026-11-14
data-in.ads.oppomobile.comNot in the scope2026-11-14
data-sg.ads.oppomobile.comNot in the scope2026-11-14
dataf.ads.oppomobile.comNot in the scope2026-11-14
g1.ads.oppomobile.comNot in the scope2026-11-14
sms.ads.oppomobile.comNot in the scope2026-11-14
sms-in.ads.oppomobile.comNot in the scope2026-11-14
uapi.ads.oppomobile.comNot in the scope2026-11-14
adsfs.oppomobile.comNot in the scope2026-11-14
adsfs-id.oppomobile.comNot in the scope2026-11-14
adsfs-in.oppomobile.comNot in the scope2026-11-14
aiocloud.oppomobile.comNot in the scope2026-11-14
annotate-ait.oppomobile.comNot in the scope2026-11-14
aocloud.oppomobile.comNot in the scope2026-11-14
api-snake.oppomobile.comapiNot in the scope2026-11-14
apps.oppomobile.comNot in the scope2026-11-14
location.apps.oppomobile.comNot in the scope2026-11-14
logistics.apps.oppomobile.comNot in the scope2026-11-14
news.apps.oppomobile.comNot in the scope2026-11-14
proxy.apps.oppomobile.comNot in the scope2026-11-14
proxyeu.apps.oppomobile.comNot in the scope2026-11-14
proxyf.apps.oppomobile.comNot in the scope2026-11-14
recharge.apps.oppomobile.comNot in the scope2026-11-14
sticker.apps.oppomobile.comNot in the scope2026-11-14
stickereu.apps.oppomobile.comNot in the scope2026-11-14
stickerf.apps.oppomobile.comNot in the scope2026-11-14
tips.apps.oppomobile.comNot in the scope2026-11-14
tipsf.apps.oppomobile.comNot in the scope2026-11-14
tipsf-eu.apps.oppomobile.comNot in the scope2026-11-14
translate.apps.oppomobile.comNot in the scope2026-11-14
translatefs-sg.apps.oppomobile.comNot in the scope2026-11-14
bact.oppomobile.comNot in the scope2026-11-14
httpdns.basic.oppomobile.comNot in the scope2026-11-14
battle-websocket-instant-test.oppomobile.comtestNot in the scope2026-11-14
h5.book.oppomobile.comNot in the scope2026-11-14
bot.oppomobile.comNot in the scope2026-11-14
i.bot.oppomobile.comNot in the scope2026-11-14
v.bot.oppomobile.comNot in the scope2026-11-14
browser.oppomobile.comNot in the scope2026-11-14
a-in.browser.oppomobile.comNot in the scope2026-11-14
cloudi.browser.oppomobile.comNot in the scope2026-11-14
cloudi-in.browser.oppomobile.comNot in the scope2026-11-14
cloudi-sg.browser.oppomobile.comNot in the scope2026-11-14
comment.browser.oppomobile.comNot in the scope2026-11-14
i.flow.browser.oppomobile.comNot in the scope2026-11-14
i.browser.oppomobile.comNot in the scope2026-11-14
i-th.browser.oppomobile.comNot in the scope2026-11-14
i-vn.browser.oppomobile.comNot in the scope2026-11-14
if.browser.oppomobile.comNot in the scope2026-11-14
if-sg.browser.oppomobile.comNot in the scope2026-11-14
iflow.browser.oppomobile.comNot in the scope2026-11-14
iflow-th.browser.oppomobile.comNot in the scope2026-11-14
iflow-vn.browser.oppomobile.comNot in the scope2026-11-14
iflowf.browser.oppomobile.comNot in the scope2026-11-14
iflowf-sg.browser.oppomobile.comNot in the scope2026-11-14
kernellog.browser.oppomobile.comNot in the scope2026-11-14
kernellogf.browser.oppomobile.comNot in the scope2026-11-14
kernellogf-sg.browser.oppomobile.comNot in the scope2026-11-14
stat.browser.oppomobile.comNot in the scope2026-11-14
u.browser.oppomobile.comNot in the scope2026-11-14
u-id.browser.oppomobile.comNot in the scope2026-11-14
u-in.browser.oppomobile.comNot in the scope2026-11-14
u-th.browser.oppomobile.comNot in the scope2026-11-14
browserimg.oppomobile.comNot in the scope2026-11-14
c-snake.oppomobile.comNot in the scope2026-11-14
captcha-sec.oppomobile.comNot in the scope2026-11-14
captcha-sec-eu.oppomobile.comNot in the scope2026-11-14
captcha-sec-ind.oppomobile.comNot in the scope2026-11-14
captcha-sec-sgp.oppomobile.comNot in the scope2026-11-14
cdo.oppomobile.comNot in the scope2026-11-14
api.cdo.oppomobile.comapiNot in the scope2026-11-14
app.cdo.oppomobile.comNot in the scope2026-11-14
epoch.cdo.oppomobile.comNot in the scope2026-11-14
forum.cdo.oppomobile.comNot in the scope2026-11-14
gslb.cdo.oppomobile.comNot in the scope2026-11-14
iactivity.cdo.oppomobile.comNot in the scope2026-11-14
idepoch.cdo.oppomobile.comNot in the scope2026-11-14
iepoch.cdo.oppomobile.comNot in the scope2026-11-14
igslb.cdo.oppomobile.comNot in the scope2026-11-14
inactivity.cdo.oppomobile.comNot in the scope2026-11-14
inapp.cdo.oppomobile.comNot in the scope2026-11-14
inepoch.cdo.oppomobile.comNot in the scope2026-11-14
intlapi.cdo.oppomobile.comNot in the scope2026-11-14

16 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated