Bug bounty program
OP
OPPO
Most upvoted reports4
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Arbitrary thread deletion on c.realme.com#869705 | Insecure Direct Object Reference | – | $600 | 73 |
| Information Disclosure at https://portal.finzfin.com/1.txt#1011073 | Information Disclosure | – | $50 | 20 |
| No rate limit on Reporting a Threat on [https://community.coloros.com] lead to Increase in the User Group/Points#887684 | Input Validation and Logic | – | $100 | 14 |
| RXSS in https://store.oppomobile.com/#869870 | Cross-site Scripting | – | $100 | 10 |
Subdomains3,641
| Name | Scope | First seen |
|---|---|---|
| www.google.com-94e3ff-machine-machine-honors-engine.gitlab.heytap.comgit | Not in the scope | 2026-11-14 |
| www.google.com-94e3ff-storefs1-storefs1-learning-git.mail-search-client.lab.heytapdownload.comgit, mail | Not in the scope | 2026-11-14 |
| www.google.com-adsense-devs-cn01a-ocloud-start-make-money-combot.github.heytapimage.comgit | Not in the scope | 2026-11-14 |
| ad4.a.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| k12.a.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| g9i.13.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| iia1.apk.scm.a.myoppo.comgit | Not in the scope | 2026-11-14 |
| pro.13.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| rili.a.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| sga.ssl.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| file1.pc.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| jdd2.alt.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| lymtjx.apk.scm.4.myoppo.comgit | Not in the scope | 2026-11-14 |
| qps1.apk.scm.elb.myoppo.comgit | Not in the scope | 2026-11-14 |
| shtt.ssl.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| bd0.ghcpi.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| c4.search.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| cdimg.ssl.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| mmggg.ssl.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| mp3.brand.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| salary1.apk.scm.a.myoppo.comgit | Not in the scope | 2026-11-14 |
| tarpa.apk.scm.nov.myoppo.comgit | Not in the scope | 2026-11-14 |
| zg2.stats.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| 06-144.ops.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| bdm.github.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| hq1398.apk.scm.cdn.myoppo.comgit | Not in the scope | 2026-11-14 |
| image2.int.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| ipo.brazil.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| ja.newds01.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| jss.assets.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| no.edge.s3.apk.scm.myoppo.comdata, git | Not in the scope | 2026-11-14 |
| oalivt.ssl.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| 001.support.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| fpb5.assets.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| fpbcode.apk.scm.nov.myoppo.comgit | Not in the scope | 2026-11-14 |
| gccode.turk.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| mlbsdown.apk.scm.18.myoppo.comgit | Not in the scope | 2026-11-14 |
| prod.akamai.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| q.dzbkindex.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| ggb.resource.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| jaqassert.pc.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| jp.traffic.apk.scm.4.myoppo.comgit | Not in the scope | 2026-11-14 |
| chengdu.ghcpi.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| domain1.ghcpi.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| patcht.assets.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| thumb102.apps.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| bdy.apk.scm-admins.cgi.myoppo.comgit | Not in the scope | 2026-11-14 |
| di.adminsitory.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| einstein.ghcpi.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| fenqi.brandhub.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| henhaodm.brand.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| 7360c.bitbucket.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| cdhbm.bitbucket.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| cdn3.apk.scm-admins.cgi.myoppo.comgit | Not in the scope | 2026-11-14 |
| cedarmonte.2010.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| dm5.global.2012.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| ffsm.2dbc3f05v1.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| gcfi-md.newds01.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| zgzxm.bitbucket.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| gat.cvs-email.apk.scm.w3.myoppo.comgit | Not in the scope | 2026-11-14 |
| xiangfande1.apps.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| zh13923723458.apk.scm.18.myoppo.comgit | Not in the scope | 2026-11-14 |
| kd.administrators.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| gg2.2dbc3f05metric.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| chuxiusha.bitbucket.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| hospitalng.resource.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| img50.asana-traffic.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| lide.servicetest-sg.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| richpeace.dzbkindex.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| richsports.olearning.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| bvs44snagi68m01o1ljg.2.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| bvrutnmuc7d3i8trmdeg.14.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| bvrv0pmuc7d33v74rte0.gh.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| bvrv5k3pg8nuh0v91t70.apk.scm.18.myoppo.comgit | Not in the scope | 2026-11-14 |
| bvrupvjkvfp8qckqjn70.apk.scm.cdn.myoppo.comgit | Not in the scope | 2026-11-14 |
| bvrv0irpg8nucfc423f0.apk.scm.nov.myoppo.comgit | Not in the scope | 2026-11-14 |
| bvrv9ubkvfp038uihv3g.apk.scm.lan.myoppo.comgit | Not in the scope | 2026-11-14 |
| bvs40rde0shm9h3gspfg.int.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| bvs40rde0shm9h3gthkg.int.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| bvs40rde0shm9h3gu2og.int.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| bvs81cjpg8nsmsj84uf0.get.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| 888.scm-mobile-repository.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| bvrup65e0shhdk0hi8ag.apps.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| bvrup65e0shhdk0hiq2g.apps.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| bvruq4te0shib8lrgf70.turk.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| dmy.2dbc3f05-authenticate.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| bvrupunagi6fs1latlp0.reset.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| bvs3tkbkvfp3fnf064b0.admin.apk.scm.myoppo.comadmin, git | Not in the scope | 2026-11-14 |
| bvs44ibpg8nuof6eb6og.s-ops.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| bvruurbpg8nudf1t2hog.apk.scm.w3.php.myoppo.comgit | Not in the scope | 2026-11-14 |
| bvs3tfuuc7dcg6bje6m0.akamai.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| bvs3tfuuc7dcg6bje9n0.akamai.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| k5nss.scm-mobile-repository.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| bvruscjkvfp0qphfpk1g.newds01.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| bvruut5e0shinubtlru0.edge.s3.apk.scm.myoppo.comdata, git | Not in the scope | 2026-11-14 |
| bvrv22le0shhjvob4e40.elastic.apk.scm.myoppo.comdata, git | Not in the scope | 2026-11-14 |
| bvrv22le0shhjvob598g.elastic.apk.scm.myoppo.comdata, git | Not in the scope | 2026-11-14 |
| cdn-service.cloud.repository.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| bvs3rluuc7d6ou9l9pdg.resource.apk.scm.myoppo.comgit | Not in the scope | 2026-11-14 |
| bvrv4avagi6frbdbnlv0.apk.scm-admins.cgi.myoppo.comgit | Not in the scope | 2026-11-14 |
16 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.