| Company | Asset | Asset Type | Coverage | Severity | Bounty | Create Date | Resolved |
|---|---|---|---|---|---|---|---|
| Home Bargains | https://hackerone-m1rtuq8orz.hbstaging.website/ | Url | In Scope | Critical | Eligible | 2026-06-12 | 0 |
| Judge.me | insights.judgeme.dev | Domain | In Scope | Critical | Eligible | 2026-06-11 | 0 |
| MercadoLibre | mercadobackoffice.com | Domain | In Scope | Critical | Eligible | 2026-06-11 | 0 |
| MercadoLibre | mpago.la | Domain | In Scope | Critical | Eligible | 2026-06-11 | 0 |
| MercadoLibre | mpago.li | Domain | In Scope | Critical | Eligible | 2026-06-11 | 0 |
| MercadoLibre | mercadopago.com.ve | Domain | In Scope | Critical | Eligible | 2026-06-11 | 0 |
| MercadoLibre | mercadoenvios.com.ve | Domain | In Scope | Critical | Eligible | 2026-06-11 | 0 |
| Airtable | https://www.npmjs.com/package/@airtable/mcp-cli | SourceCode | In Scope | Critical | Eligible | 2026-06-09 | 0 |
| Airtable | mcp.staging.airtable.com | Domain | In Scope | Critical | Eligible | 2026-06-09 | 0 |
| PortSwigger Web Security | id.portswigger.net | Domain | In Scope | Critical | Eligible | 2026-06-09 | 0 |
| TikTok | *.soundon.global | Wildcard | In Scope | Critical | Eligible | 2026-06-08 | 0 |
| TikTok | www.soundon.global | Domain | In Scope | Critical | Eligible | 2026-06-08 | 0 |
| KHealth | *.pennmedicine.connect-visit.com | Wildcard | In Scope | Critical | Eligible | 2026-06-05 | 0 |
| KHealth | *.novanthealthvirtualprimarycare.org | Wildcard | In Scope | Critical | Eligible | 2026-06-05 | 0 |
| KHealth | *.primarycareondemand.mayoclinic.org | Wildcard | In Scope | Critical | Eligible | 2026-06-05 | 0 |
| KHealth | *.hmh247.org | Wildcard | In Scope | Critical | Eligible | 2026-06-05 | 0 |
| KHealth | *.northwellprimarycarenow.com | Wildcard | In Scope | Critical | Eligible | 2026-06-05 | 0 |
| KHealth | *.mgbcareconnect.org | Wildcard | In Scope | Critical | Eligible | 2026-06-05 | 0 |
| KHealth | *.csconnect.org | Wildcard | In Scope | Critical | Eligible | 2026-06-05 | 0 |
| KHealth | *.khealth-test.com | Wildcard | In Scope | Critical | Eligible | 2026-06-05 | 2 |
| KHealth | *.hhc247.org | Wildcard | In Scope | Critical | Eligible | 2026-06-05 | 1 |
| Shopify | Authentication & ATO | OtherAsset | In Scope | Critical | Eligible | 2026-06-05 | 0 |
| Flutter UK&I | *.ppb.com | Wildcard | In Scope | Critical | Eligible | 2026-06-02 | 0 |
| Crowdstrike | sgnlapis.cloud | Domain | In Scope | Critical | Eligible | 2026-05-29 | 0 |
| Crowdstrike | sgnl.cloud | Domain | In Scope | Critical | Eligible | 2026-05-29 | 0 |
| Crowdstrike | sgnl.team | Domain | In Scope | Critical | Eligible | 2026-05-29 | 0 |
| Crowdstrike | sgnl.ai | Domain | In Scope | Critical | Eligible | 2026-05-29 | 0 |
| Stripe | Customer Portal | OtherAsset | In Scope | Critical | Eligible | 2026-05-29 | 0 |
| Stripe | Global Payouts | OtherAsset | In Scope | Critical | Eligible | 2026-05-29 | 0 |
| Stripe | Stripe fiat-to-crypto onramp | OtherAsset | In Scope | Critical | Eligible | 2026-05-29 | 0 |
| Stripe | Stripe Projects | OtherAsset | In Scope | Critical | Eligible | 2026-05-29 | 1 |
| Stripe | Stripe CLI | OtherAsset | In Scope | Critical | Eligible | 2026-05-29 | 0 |
| Visa | www.visa.com.ru | Domain | In Scope | Critical | Eligible | 2026-05-29 | 0 |
| GoCardless Bug Bounty Program | developer.gocardless.com | Domain | In Scope | Low | Eligible | 2026-05-28 | 0 |
| Visa | survey.visa.com | Domain | In Scope | Critical | Eligible | 2026-05-27 | 0 |
| X / xAI | grok-build-cli | Executable | In Scope | Critical | Eligible | 2026-05-27 | 0 |
| Elastic | Elastic Credentials | OtherAsset | In Scope | High | Eligible | 2026-05-25 | 0 |
| GoCardless Bug Bounty Program | manage-sandbox.gocardless.com | Domain | In Scope | High | Eligible | 2026-05-25 | 0 |
| Visa | https://ebctest.cybersource.com/pbl | Url | In Scope | Critical | Eligible | 2026-05-21 | 0 |
| OPPO | https://e-global.heytap.com/marketing/login | Url | In Scope | Critical | Eligible | 2026-05-18 | 1 |
| PlayStation | www.playstation.com | Domain | In Scope | Critical | Eligible | 2026-05-15 | 0 |
| PlayStation | web.np.playstation.com | Domain | In Scope | Critical | Eligible | 2026-05-15 | 0 |
| PlayStation | compete.playstation.com | Domain | In Scope | Critical | Eligible | 2026-05-15 | 0 |
| PlayStation | session-share.playstation.com | Domain | In Scope | Critical | Eligible | 2026-05-15 | 0 |
| PlayStation | profile.playstation.com | Domain | In Scope | Critical | Eligible | 2026-05-15 | 0 |
| Visa | releasor.payworks.com/ | Domain | In Scope | Critical | Eligible | 2026-05-14 | 0 |
| Faraday, Inc. | row.pro | Domain | In Scope | Critical | Eligible | 2026-05-13 | 0 |
| Faraday, Inc. | buy.faraday.ai | Domain | In Scope | Critical | Eligible | 2026-05-13 | 0 |
| Adobe | Behance Freelance Job creation | OtherAsset | In Scope | Critical | Eligible | 2026-05-12 | 0 |
| Circle BBP | https://github.com/circlefin/stellar-cctp | Url | In Scope | Critical | Eligible | 2026-05-12 | 0 |