Skip to content
Connect AISign inSign up free

Bug bounty program

OP

OPPO

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
133
Disclosed reports
4
Subdomains
3,641
Vendor on CyberSIXT
OPPO (24 CVEs, 0 exploited)

Most upvoted reports4

Most upvoted reports of OPPO
ReportWeaknessDisclosedBountyVotes
Arbitrary thread deletion on c.realme.com#869705Insecure Direct Object Reference–$60073
Information Disclosure at https://portal.finzfin.com/1.txt#1011073Information Disclosure–$5020
No rate limit on Reporting a Threat on [https://community.coloros.com] lead to Increase in the User Group/Points#887684Input Validation and Logic–$10014
RXSS in https://store.oppomobile.com/#869870Cross-site Scripting–$10010

Subdomains3,641

Root:realme.com
Scope
Name suggests
First seen
Text fileClear filters55 names
Subdomains of OPPO
NameScopeFirst seen
account.realme.comNot in the scope2026-11-14
api.realme.comapiNot in the scope2026-11-14
api-app.realme.comapiNot in the scope2026-11-14
battle-api.realme.comapiNot in the scope2026-11-14
buy.realme.comNot in the scope2026-11-14
www.buy.realme.comNot in the scope2026-11-14
c.realme.comIn scope2026-11-14
download.c.realme.comNot in the scope2026-11-14
pre-api.c.realme.comapiNot in the scope2026-11-14
static.c.realme.comNot in the scope2026-11-14
campushr.realme.comNot in the scope2026-11-14
career.realme.comNot in the scope2026-11-14
cloud.realme.comNot in the scope2026-11-14
connect.realme.comNot in the scope2026-11-14
danghuan.realme.comNot in the scope2026-11-14
email.realme.comNot in the scope2026-11-14
event.realme.comNot in the scope2026-11-14
event-api.realme.comapiNot in the scope2026-11-14
www.event.realme.comNot in the scope2026-11-14
hr.realme.comNot in the scope2026-11-14
id.realme.comNot in the scope2026-11-14
ilockcardf.realme.comNot in the scope2026-11-14
imap.realme.commailNot in the scope2026-11-14
in-lockcard.realme.comNot in the scope2026-11-14
inrms.realme.comNot in the scope2026-11-14
iot-in-health.realme.comNot in the scope2026-11-14
iot-in-ota.realme.comNot in the scope2026-11-14
iot-logser.realme.comNot in the scope2026-11-14
iot-ota.realme.comNot in the scope2026-11-14
iot-sea-health.realme.comNot in the scope2026-11-14
iot-sea-user.realme.comNot in the scope2026-11-14
iot-wiki.realme.comtoolsNot in the scope2026-11-14
join.realme.comNot in the scope2026-11-14
lockcard-app-api.realme.comapiNot in the scope2026-11-14
lottery-c.realme.comNot in the scope2026-11-14
mail.realme.commailNot in the scope2026-11-14
msts.realme.comNot in the scope2026-11-14
oms.realme.comNot in the scope2026-11-14
oms-api.realme.comapiNot in the scope2026-11-14
open.realme.comNot in the scope2026-11-14
partner.realme.comNot in the scope2026-11-14
payment.realme.comNot in the scope2026-11-14
phone-api.realme.comapiNot in the scope2026-11-14
pop3.realme.commailNot in the scope2026-11-14
pre-3w.realme.comNot in the scope2026-11-14
pre-api.realme.comapiNot in the scope2026-11-14
pre-buy.realme.comNot in the scope2026-11-14
pre-event.realme.comNot in the scope2026-11-14
pre-event-api.realme.comapiNot in the scope2026-11-14
pre-partner.realme.comNot in the scope2026-11-14
privacy.realme.comNot in the scope2026-11-14
searms.realme.comNot in the scope2026-11-14
smtp.realme.commailNot in the scope2026-11-14
www.realme.comNot in the scope2026-11-14
www.www.realme.comNot in the scope2026-11-14

16 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated