Bug bounty program
OP
OPPO
Most upvoted reports4
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Arbitrary thread deletion on c.realme.com#869705 | Insecure Direct Object Reference | – | $600 | 73 |
| Information Disclosure at https://portal.finzfin.com/1.txt#1011073 | Information Disclosure | – | $50 | 20 |
| No rate limit on Reporting a Threat on [https://community.coloros.com] lead to Increase in the User Group/Points#887684 | Input Validation and Logic | – | $100 | 14 |
| RXSS in https://store.oppomobile.com/#869870 | Cross-site Scripting | – | $100 | 10 |
Subdomains3,641
| Name | Scope | First seen |
|---|---|---|
| 25.realmepaysa.com | Not in the scope | 2026-11-14 |
| api.realmepaysa.comapi | Not in the scope | 2026-11-14 |
| 0-004.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 20.0-139.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 2009.0-139.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| euwe.0-139.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| forms.0-139.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| pl.0-139.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| profile.0-139.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| tools.0-139.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| uat.0-139.info.realmepaysa.comtest | Not in the scope | 2026-11-14 |
| web1.0-139.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-18.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-2017.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-2021.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-elb.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-engineering.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-europe.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-games.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-global.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-ids.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-internal.info.realmepaysa.cominternal | Not in the scope | 2026-11-14 |
| 00-jinx.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-korea.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-march.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-mirror.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-na.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-nautilus.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-netherlands.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-oceania.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-preprod.info.realmepaysa.comstaging | Not in the scope | 2026-11-14 |
| 00-priv.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-prod.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-production.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-qq.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-skins.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-swagger.info.realmepaysa.comapi | Not in the scope | 2026-11-14 |
| 00-testing.info.realmepaysa.comtest | Not in the scope | 2026-11-14 |
| 00-testing1.info.realmepaysa.comtest | Not in the scope | 2026-11-14 |
| 00-tool.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-tools.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-tr.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-train.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-training.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-tur.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-us-east-13.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00-us-east-7.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 12.00.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| github.00.info.realmepaysa.comgit | Not in the scope | 2026-11-14 |
| pc.00.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| server.00.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| uat.00.info.realmepaysa.comtest | Not in the scope | 2026-11-14 |
| 0007.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 0009.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 002014.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 002015.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 007-141.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 008-108.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00elasticbeanstalk.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00europewest.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00evelynn.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00firewall.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00ghcpi.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00hw.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00inter.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00mirror.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00nl.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00page.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00pass.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00preprod.info.realmepaysa.comstaging | Not in the scope | 2026-11-14 |
| 00profile.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00promo.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00sandbox.info.realmepaysa.comtest | Not in the scope | 2026-11-14 |
| 00security.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00sept.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00skins.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00spring.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00ssl.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00swagger.info.realmepaysa.comapi | Not in the scope | 2026-11-14 |
| 00system.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00test.info.realmepaysa.comtest | Not in the scope | 2026-11-14 |
| 00tool.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00tpe.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00turk.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00twitch.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00us-east-11.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00us-east-14.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00v.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 00webapp.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 01.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 010-68.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 01ec0.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 03.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 03-20.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 03-2009.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 03-2015.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 03-7.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 03-alt.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 03-analytics.info.realmepaysa.com | Not in the scope | 2026-11-14 |
| 03-api1.info.realmepaysa.comapi | Not in the scope | 2026-11-14 |
16 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.