Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
42
Disclosed reports
13
Subdomains
17,149
Vendor on CyberSIXT
Paypal (21 CVEs, 0 exploited)

Most upvoted reports13

All reports
Most upvoted reports of PayPal
ReportWeaknessDisclosedBountyVotes
Bypass for #488147 enables stored XSS on https://paypal.com/signin againAnalysed#510152Injection and Smuggling2019-08-07$20,0002,687
Token leak in security challenge flow allows retrieving victim's PayPal email and plain text passwordAnalysed#739737Authentication2020-01-08$15,3001,409
RCE via npm misconfig -- installing internal libraries from the public registryAnalysed#925585Command and Code Injection2021-02-09$30,000946
DoS on PayPal via web cache poisoningAnalysed#622122Denial of Service2019-10-23$9,700851
IDOR to add secondary users in www.paypal.com/businessmanage/users/api/v1/usersAnalysed#415081Insecure Direct Object Reference2019-07-30$10,500797
Stored XSS on https://paypal.com/signin via cache poisoningAnalysed#488147Injection and Smuggling2019-08-07$18,900685
[PayPal Android] Remote theft of user session using push_notification_webview deeplinkAnalysed#424443Open Redirect2019-02-07–188
[Venmo Android] Remote theft of user sessionAnalysed#401940Open Redirect2019-02-07–151
Reflected XSS at https://www.paypal.com/ppcreditapply/da/usAnalysed#753835Cross-site Scripting2020-05-19–137
XSS [flow] - on www.paypal.com/paypalme/my/landing (requires user interaction)Analysed#425200Cross-site Scripting2018-11-06–100

Subdomains17,149

Subdomains of PayPal
NameScopeFirst seen
api.3t.paypal.comapiIn scope2026-11-14
api.3t.aa.paypal.comapiIn scope2026-11-14
active-api-m.paypal.comapiIn scope2026-11-14
active-api-s.paypal.comapiIn scope2026-11-14
api.paypal.comapiIn scope2026-11-14
api-3t.paypal.comapiIn scope2026-11-14
api-3t-aa-silo-phx.paypal.comapiIn scope2026-11-14
api-3t-raz01-silo.paypal.comapiIn scope2026-11-14
api-3t-silo-phx.paypal.comapiIn scope2026-11-14
api-aa.paypal.comapiIn scope2026-11-14
api-aa-3t.paypal.comapiIn scope2026-11-14
api-aa-silo-phx.paypal.comapiIn scope2026-11-14
api-c.paypal.comapiIn scope2026-11-14
api-cloudflare.paypal.comapiIn scope2026-11-14
api-dev-sfx-observability.paypal.comapi, devIn scope2026-11-14
api-edge.paypal.comapiIn scope2026-11-14
api-m.paypal.comapiIn scope2026-11-14
api-m-cloudflare.paypal.comapiIn scope2026-11-14
api-m-edge.paypal.comapiIn scope2026-11-14
www.api-m.paypal.comapiIn scope2026-11-14
api-prod-sfx-observability.paypal.comapiIn scope2026-11-14
api-pxp.paypal.comapiIn scope2026-11-14
api-raz01-silo.paypal.comapiIn scope2026-11-14
api-s.paypal.comapiIn scope2026-11-14
api-silo-3t-aa-dcg02.paypal.comapiIn scope2026-11-14
api-silo-3t-aa-slca.paypal.comapiIn scope2026-11-14
api-silo-3t-aa-slcb.paypal.comapiIn scope2026-11-14
api-silo-3t-dcg02.paypal.comapiIn scope2026-11-14
api-silo-3t-dcg11.paypal.comapiIn scope2026-11-14
api-silo-3t-dcg12.paypal.comapiIn scope2026-11-14
api-silo-3t-dcg13.paypal.comapiIn scope2026-11-14
api-silo-3t-slca.paypal.comapiIn scope2026-11-14
api-silo-3t-slcb.paypal.comapiIn scope2026-11-14
api-silo-aa-dcg02.paypal.comapiIn scope2026-11-14
api-silo-aa-dcg12.paypal.comapiIn scope2026-11-14
api-silo-aa-dcg13.paypal.comapiIn scope2026-11-14
api-silo-aa-slca.paypal.comapiIn scope2026-11-14
api-silo-dcg02.paypal.comapiIn scope2026-11-14
api-silo-dcg11.paypal.comapiIn scope2026-11-14
api-silo-dcg12.paypal.comapiIn scope2026-11-14
api-silo-dcg13.paypal.comapiIn scope2026-11-14
api-silo-phx.paypal.comapiIn scope2026-11-14
api-silo-slca.paypal.comapiIn scope2026-11-14
api-silo-slcb.paypal.comapiIn scope2026-11-14
api-stage.paypal.comapi, stagingIn scope2026-11-14
api-t.paypal.comapiIn scope2026-11-14
api-test.paypal.comapi, testIn scope2026-11-14
api-waas.paypal.comapiIn scope2026-11-14
cors.api.paypal.comapiIn scope2026-11-14
policymgrserv.api.paypal.comapiIn scope2026-11-14
privacygovernance.api.paypal.comapiIn scope2026-11-14
privacyopenshare.api.paypal.comapiIn scope2026-11-14
sts-ft.api.paypal.comapiIn scope2026-11-14
testing.api.paypal.comapi, testIn scope2026-11-14
www.api.paypal.comapiIn scope2026-11-14
au-cdr-apis.paypal.comapiIn scope2026-11-14
api.beta-sandbox.paypal.comapi, staging, testIn scope2026-11-14
api-3t.beta-sandbox.paypal.comapi, staging, testIn scope2026-11-14
api-aa.beta-sandbox.paypal.comapi, staging, testIn scope2026-11-14
api-aa-3t.beta-sandbox.paypal.comapi, staging, testIn scope2026-11-14
ccg01-origin-api-1.paypal.comapiIn scope2026-11-14
ccg01-origin-api-1-ebay.paypal.comapiIn scope2026-11-14
ccg01-origin-api-2.paypal.comapiIn scope2026-11-14
ccg01-origin-api-ebay.paypal.comapiIn scope2026-11-14
ccg01-origin-api-m.paypal.comapiIn scope2026-11-14
ccg01-origin-api-m-1.paypal.comapiIn scope2026-11-14
ccg01-origin-api-m-2.paypal.comapiIn scope2026-11-14
ccg01-origin-api-m-signal-science.paypal.comapiIn scope2026-11-14
ccg12-origin-api-1.paypal.comapiIn scope2026-11-14
ccg12-origin-api-2.paypal.comapiIn scope2026-11-14
ccg12-origin-api-3.paypal.comapiIn scope2026-11-14
ccg12-origin-api-m-1.paypal.comapiIn scope2026-11-14
ccg12-origin-api-m-2.paypal.comapiIn scope2026-11-14
ccg12-origin-api-m-3.paypal.comapiIn scope2026-11-14
ccg13-origin-api-ebay.paypal.comapiIn scope2026-11-14
ccg13-origin-api-m.paypal.comapiIn scope2026-11-14
ccg13-origin-api-m-signal-science.paypal.comapiIn scope2026-11-14
ccg14-origin-api-ebay.paypal.comapiIn scope2026-11-14
ccg14-origin-api-m.paypal.comapiIn scope2026-11-14
ccg14-origin-api-m-signal-science.paypal.comapiIn scope2026-11-14
cld-edge-origin-api.paypal.comapiIn scope2026-11-14
cld-edge-origin-api-aa.paypal.comapiIn scope2026-11-14
cup-api.paypal.comapiIn scope2026-11-14
cup-api-phx.paypal.comapiIn scope2026-11-14
cup-api-slc-a.paypal.comapiIn scope2026-11-14
cup-api-slc-b.paypal.comapiIn scope2026-11-14
dcg12-origin-api-m.paypal.comapiIn scope2026-11-14
api.ebayqe.paypal.comapiIn scope2026-11-14
stage-api.edge.paypal.comapi, stagingIn scope2026-11-14
stage-api-m.edge.paypal.comapi, stagingIn scope2026-11-14
api.financing-mint.paypal.comapiIn scope2026-11-14
api.financing.paypal.comapiIn scope2026-11-14
api.glb.paypal.comapiIn scope2026-11-14
api-3t.glb.paypal.comapiIn scope2026-11-14
api-aa.glb.paypal.comapiIn scope2026-11-14
api-aa-3t.glb.paypal.comapiIn scope2026-11-14
api-m.glb.paypal.comapiIn scope2026-11-14
api-m-edge.glb.paypal.comapiIn scope2026-11-14
api-m-fastly.glb.paypal.comapiIn scope2026-11-14
api-m-sandbox.glb.paypal.comapi, testIn scope2026-11-14

17,017 names are covered by the program's own scope; 3 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.