| Company | Asset | Asset Type | Coverage | Severity | Bounty | Create Date | Resolved |
|---|---|---|---|---|---|---|---|
| OPPO | com.katanlabs.matchballgame | AndroidApk | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| OPPO | https://communityin.oppo.com/ | Url | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| OPPO | https://community.oppo.com/ | Url | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| OPPO | https://c.realme.com/ru/ | Url | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| OPPO | https://c.realme.com/in/ | Url | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| OPPO | https://c.realme.com/id/ | Url | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| OPPO | https://c.realme.com/global/ | Url | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| OPPO | https://c.realme.com/eg/ | Url | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| OPPO | http://open.oppomobile.com | Url | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| OPPO | com.katanlabs.worm.ioeatemall | WindowsMicrosoftStore | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| OPPO | com.katanlabs.bubblepop | AndroidApk | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | askpeopleteam.visa.com | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | testbank.xs2a.com | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | admin-portal.api-xperience.com | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | developers.pismo.io | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | visaonchainanalytics.com | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | dwy.visa.com | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | vasdemos.visa.com | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | sap.api-xperience.com | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | visasgic.api-xperience.com | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | https://solutions.visaacceptance.com/subscription | Url | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | visainnovationprogram.com | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | codeofconduct.visa.com | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | myvu.visauniversity.com | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | vgov.catalogue.digitalcontrolroom.com | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | merchantsignagejp.visa.com | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | merchantsignageglobal.visa.com | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | merchantsignageca.visa.com | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | merchantsignageap.visa.com | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | merchantsignageeu.visa.com | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | merchantsignage.visa.com | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | experience.prod.innovexperiments.com | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | capability.prod.innovexperiments.com | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | api.prod.innovexperiments.com | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | garp.visa.com | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | cybersourcebouncebacks.visa.com | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | *.prod.innovexperiments.com | OtherAsset | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | info.cybersource.com | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | vwcm.visa.com | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | forms.cybersource.com | OtherAsset | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | info.authorize.net | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | app.demand.cybersource.com | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | vdam.visa.com | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | images.demand.cybersource.com | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Visa | www.trialpay.com | Domain | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Automattic | parse.ly | Domain | In Scope | Critical | Eligible | 2026-04-27 | 0 |
| Banco Plata | *.bancoplata.mx | Wildcard | In Scope | Critical | Eligible | 2026-04-27 | 0 |
| Tools for Humanity | https://github.com/worldcoin/orb-rustzone | SourceCode | In Scope | Critical | Eligible | 2026-04-27 | 0 |
| Tools for Humanity | https://github.com/worldcoin/orb-relay-messages | SourceCode | In Scope | Critical | Eligible | 2026-04-27 | 0 |
| Tools for Humanity | https://github.com/worldcoin/orb-secure-element | SourceCode | In Scope | Critical | Eligible | 2026-04-27 | 0 |