vulns.co
/
GKData.io MCP

Bugcrowd · 3 min read

CoStar Vulnerability Disclosure Engagement

Vulnerability Disclosure

Open current program Scope capture

What this record establishes

Scope capture

Published asset rows were captured. The full policy and eligibility were not individually reviewed.

Official directory card labeled Vulnerability Disclosure. No monetary reward displayed. Program policy and submission status not reviewed.

Published asset scope

Snapshot captured 2026-10-03. Scope status: Captured.

In scope · 60 published rows
AssetTypeGroup / eligibility
Apartments.comPublished location: https://www.apartments.comwebsiteIn Scope
Apartments.com AuthenticationPublished location: https://auth.apartments.com/ websiteIn Scope
Apartments.com Payment ServicePublished location: https://account.apartments.com/ websiteIn Scope
LoopnetPublished location: https://www.loopnet.com/ websiteIn Scope
Loopnet AuthenticationPublished location: https://auth.loopnet.com/ websiteIn Scope
Loopnet Payment ServicesPublished location: https://account.loopnet.comwebsiteIn Scope
CoStar Suite Payment ServicesPublished location: https://accout.costar.comwebsiteIn Scope
After 55Published location: https://www.after55.comwebsiteIn Scope
Apartment FinderPublished location: https://www.apartmentfinder.comwebsiteIn Scope
Apartment HomelivingPublished location: https://www.apartmenthomeliving.comwebsiteIn Scope
Corporate HousingPublished location: https://www.corporatehousing.com/websiteIn Scope
Apartments ECOMPublished location: https://ecom.apartments.comwebsiteIn Scope
Apartments LeasingPublished location: https://leasing.apartments.com/websiteIn Scope
Apartments AdminPublished location: https://networkadmin.prd.apartments.com/websiteIn Scope
Westside RentalsPublished location: https://www.westsiderentals.com/websiteIn Scope
Listing ManagerPublished location: https://listingmanager.costar.com/websiteIn Scope
MatterportPublished location: https://dev-app.matterport.com/websiteIn Scope
Attachment HandlerPublished location: https://attachments-handler-us-east-1.prd.attachments.aws.dshrp.com/websiteIn Scope
BizBuySell APIPublished location: https://api.prd.bizbuysell.com/websiteIn Scope
BizBuySellPublished location: https://www.bizbuysell.com/websiteIn Scope
BizQuestPublished location: https://www.bizquest.com/websiteIn Scope
Bureaux LocauxPublished location: https://www.bureauxlocaux.com/websiteIn Scope
Business ImmoPublished location: https://www.businessimmo.com/websiteIn Scope
Central AuthPublished location: https://secure.costargroup.com/websiteIn Scope
Power BrokerPublished location: https://www.costarpowerbrokers.com/websiteIn Scope
CoStar Real Estate ManagerPublished location: https://*.costarremanager.com/websiteIn Scope
CoStar SuitePublished location: https://product.costar.com/lender/websiteIn Scope
CoStar APIsPublished location: https://data-us-east-1.prd.dataservices.aws.dshrp.com/websiteIn Scope
Field ResearchPublished location: https://fieldresearch-bff.costargroup.com/websiteIn Scope
Find A FranchisePublished location: https://www.findafranchise.com/websiteIn Scope
For Rent MessagingPublished location: https://messaging.forrent.com/websiteIn Scope
For RentPublished location: https://www.forrent.com/websiteIn Scope
For Rent UniversityPublished location: https://www.forrentuniversity.com/websiteIn Scope
City SnapPublished location: https://www.citysnap.com/websiteIn Scope
HomesPublished location: https://www.homes.com/websiteIn Scope
Homes AdminPublished location: https://networkadmin.homes.com/websiteIn Scope
AcreValuePublished location: https://www.acrevalue.com/websiteIn Scope
LandsPublished location: https://www.land.com/websiteIn Scope
Lands APIPublished location: https://api.land.com/websiteIn Scope
Land and FarmPublished location: https://www.landandfarm.com/websiteIn Scope
Land WatchPublished location: https://www.landwatch.com/websiteIn Scope
Marketing HubPublished location: https://market.land.com/websiteIn Scope
Property Control CenterPublished location: https://www.propertycontrolcenter.com/websiteIn Scope
City FeetPublished location: https://www.cityfeet.comwebsiteIn Scope
Buy MatterportPublished location: https://dev-buy.matterport.com/websiteIn Scope
Support MatterportPublished location: https://cs.matterport.com/websiteIn Scope
Off Campus PartnersPublished location: https://admin.offcampuspartners.com/websiteIn Scope
Off Campus Partners ProductPublished location: https://product.offcampuspartners.com/websiteIn Scope
AM:PM HotelsPublished location: https://www.ampmhotels.com/websiteIn Scope
Ten-X AuctioneerPublished location: https://auctiondash.ten-x.com/websiteIn Scope
Ten-XPublished location: https://www.ten-x.com/websiteIn Scope
Thomas Daily MarketingPublished location: https://www.thomas-daily.de/websiteIn Scope
Thomas Daily WebPublished location: https://web.thomas-daily.de/websiteIn Scope
Visual LeasePublished location: https://visuallease.com/websiteIn Scope
Visual Lease WebhookPublished location: https://webhook.visuallease.com/websiteIn Scope
Web EnterprisePublished location: https://we.costar.com/websiteIn Scope
Discover MatterportPublished location: https://discover.matterport.com/websiteIn Scope
Capture Services QAPublished location: https://qa3-captureservices.matterport.com/websiteIn Scope
Capture ServicesPublished location: https://captureservices.matterport.comwebsiteIn Scope
API MatterportPublished location: https://dev-api.matterport.com/graphiqlwebsiteIn Scope
Out of scope · 1 published rows
AssetTypeGroup / eligibility
OnTheMarketPublished location: https://www.onthemarket.com/websiteOut-of-Scope

Capture limits

  • Only the published asset table was captured; program rules and submission eligibility still require individual review.

Live policy and platform eligibility still require review.

Sources and collection identity

  1. Official program page Primary source · reviewed 2026-10-03
  2. Published scope source Primary source · reviewed 2026-10-03

Appears in Discovery, Bugcrowd. No identity match is inferred from a shared company name.

GitHub snapshot 2026-10-04

53796974ace8 · JSON exports & schemas · CC BY 4.0 content / MIT software