Skip to content

Bug bounty program · HackerOne

UPS VDP

Open on HackerOne See this on the Atlas

Nopays bounties

3assets in scope

3disclosed reports

Most upvoted reports3

#1490470ValidAdmin Authentication Bypass Lead to Admin Account TakeoverUPS VDP · Authentication · 2022–106votes
#1539426ValidBroken access controlUPS VDP · Authentication · 2022–55votes
#1536461ValidReflected XSS on ███?loc=UPS VDP · Cross-site Scripting · 2022–11votes

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.