| Company | Asset | Asset Type | Coverage | Severity | Bounty | Create Date | Resolved |
|---|---|---|---|---|---|---|---|
| KHealth | *.pennmedicine.connect-visit.com | Wildcard | In Scope | Critical | Eligible | 2026-06-05 | 0 |
| KHealth | *.novanthealthvirtualprimarycare.org | Wildcard | In Scope | Critical | Eligible | 2026-06-05 | 0 |
| KHealth | *.primarycareondemand.mayoclinic.org | Wildcard | In Scope | Critical | Eligible | 2026-06-05 | 0 |
| KHealth | *.hmh247.org | Wildcard | In Scope | Critical | Eligible | 2026-06-05 | 0 |
| KHealth | *.northwellprimarycarenow.com | Wildcard | In Scope | Critical | Eligible | 2026-06-05 | 0 |
| KHealth | *.mgbcareconnect.org | Wildcard | In Scope | Critical | Eligible | 2026-06-05 | 0 |
| KHealth | *.csconnect.org | Wildcard | In Scope | Critical | Eligible | 2026-06-05 | 0 |
| KHealth | *.khealth-test.com | Wildcard | In Scope | Critical | Eligible | 2026-06-05 | 0 |
| KHealth | *.hhc247.org | Wildcard | In Scope | Critical | Eligible | 2026-06-05 | 0 |
| Shopify | Authentication & ATO | OtherAsset | In Scope | Critical | Eligible | 2026-06-05 | 0 |
| Flutter UK&I | *.ppb.com | Wildcard | In Scope | Critical | Eligible | 2026-06-02 | 0 |
| Crowdstrike | sgnlapis.cloud | Domain | In Scope | Critical | Eligible | 2026-05-29 | 0 |
| Crowdstrike | sgnl.cloud | Domain | In Scope | Critical | Eligible | 2026-05-29 | 0 |
| Crowdstrike | sgnl.team | Domain | In Scope | Critical | Eligible | 2026-05-29 | 0 |
| Crowdstrike | sgnl.ai | Domain | In Scope | Critical | Eligible | 2026-05-29 | 0 |
| Stripe | Customer Portal | OtherAsset | In Scope | Critical | Eligible | 2026-05-29 | 0 |
| Stripe | Global Payouts | OtherAsset | In Scope | Critical | Eligible | 2026-05-29 | 0 |
| Stripe | Stripe fiat-to-crypto onramp | OtherAsset | In Scope | Critical | Eligible | 2026-05-29 | 0 |
| Stripe | Stripe Projects | OtherAsset | In Scope | Critical | Eligible | 2026-05-29 | 0 |
| Stripe | Stripe CLI | OtherAsset | In Scope | Critical | Eligible | 2026-05-29 | 0 |
| Visa | www.visa.com.ru | Domain | In Scope | Critical | Eligible | 2026-05-29 | 0 |
| GoCardless Bug Bounty Program | developer.gocardless.com | Domain | In Scope | Low | Eligible | 2026-05-28 | 0 |
| Visa | survey.visa.com | Domain | In Scope | Critical | Eligible | 2026-05-27 | 0 |
| X / xAI | grok-build-cli | Executable | In Scope | Critical | Eligible | 2026-05-27 | 0 |
| Elastic | Elastic Credentials | OtherAsset | In Scope | High | Eligible | 2026-05-25 | 0 |
| GoCardless Bug Bounty Program | manage-sandbox.gocardless.com | Domain | In Scope | High | Eligible | 2026-05-25 | 0 |
| Visa | https://ebctest.cybersource.com/pbl | Url | In Scope | Critical | Eligible | 2026-05-21 | 0 |
| OPPO | https://e-global.heytap.com/marketing/login | Url | In Scope | Critical | Eligible | 2026-05-18 | 1 |
| PlayStation | www.playstation.com | Domain | In Scope | Critical | Eligible | 2026-05-15 | 0 |
| PlayStation | web.np.playstation.com | Domain | In Scope | Critical | Eligible | 2026-05-15 | 0 |
| PlayStation | compete.playstation.com | Domain | In Scope | Critical | Eligible | 2026-05-15 | 0 |
| PlayStation | session-share.playstation.com | Domain | In Scope | Critical | Eligible | 2026-05-15 | 0 |
| PlayStation | profile.playstation.com | Domain | In Scope | Critical | Eligible | 2026-05-15 | 0 |
| Visa | releasor.payworks.com/ | Domain | In Scope | Critical | Eligible | 2026-05-14 | 0 |
| Faraday, Inc. | row.pro | Domain | In Scope | Critical | Eligible | 2026-05-13 | 0 |
| Faraday, Inc. | buy.faraday.ai | Domain | In Scope | Critical | Eligible | 2026-05-13 | 0 |
| Adobe | Behance Freelance Job creation | OtherAsset | In Scope | Critical | Eligible | 2026-05-12 | 0 |
| Circle BBP | https://github.com/circlefin/stellar-cctp | Url | In Scope | Critical | Eligible | 2026-05-12 | 0 |
| Spotify | Save to Spotify CLI | Executable | In Scope | Critical | Eligible | 2026-05-08 | 0 |
| Stripe | mcp.stripe.com | Domain | In Scope | Critical | Eligible | 2026-05-08 | 0 |
| Circle BBP | https://github.com/circlefin/arc-remote-signer | SourceCode | In Scope | Critical | Eligible | 2026-05-07 | 0 |
| MercadoLibre | Tier 3 | OtherAsset | In Scope | Critical | Eligible | 2026-05-07 | 0 |
| Remitly | whyisend.com | Domain | In Scope | Medium | Eligible | 2026-05-07 | 0 |
| Remitly | travelcash.money | Domain | In Scope | Medium | Eligible | 2026-05-07 | 0 |
| Remitly | remitresearch.com | Domain | In Scope | Medium | Eligible | 2026-05-07 | 0 |
| Remitly | remitlywallet.com | Domain | In Scope | Medium | Eligible | 2026-05-07 | 0 |
| Remitly | remitlytest.com | Domain | In Scope | Medium | Eligible | 2026-05-07 | 0 |
| Remitly | remitlypayments.com | Domain | In Scope | Medium | Eligible | 2026-05-07 | 0 |
| Remitly | remitlypay.com | Domain | In Scope | Medium | Eligible | 2026-05-07 | 0 |
| Remitly | remitlyit.com | Domain | In Scope | Medium | Eligible | 2026-05-07 | 0 |