vulns.co
/
GKData.io MCP

HackerOne · 2 min read

PayPal

Unknown

Open current program Scope capture

What this record establishes

Scope capture

Published asset rows were captured. The full policy and eligibility were not individually reviewed.

Directory row 379; Active program checkbox checked; Bounties minimum displayed $0. Program type unknown: no positive displayed minimum; absence or zero does not establish VDP. Policy and live submission availability unverified.

Published asset scope

Snapshot captured 2026-10-03. Scope status: Captured.

In scope · 41 published rows
AssetTypeGroup / eligibility
*.xoom.comURLBounty eligible: Yes
*.paypal.comURLBounty eligible: Yes
*.braintreegateway.comURLBounty eligible: Yes
*.paydiant.comURLBounty eligible: Yes
*.venmo.comURLBounty eligible: Yes
paypal.meURLBounty eligible: Yes
py.plURLBounty eligible: Yes
*.braintreepayments.comURLBounty eligible: Yes
*.braintree-api.comURLBounty eligible: Yes
*.braintree.toolsURLBounty eligible: Yes
*.paypalcorp.comURLBounty eligible: Yes
*.hyperwallet.comURLBounty eligible: Yes
*.paylution.comURLBounty eligible: Yes
paypalobjects.comURLBounty eligible: Yes
sandbox.braintreegateway.comURLBounty eligible: Yes
www.paypal-*.comURLBounty eligible: Yes
prequal.swiftfinancial.comURLBounty eligible: Yes
partner.swiftfinancial.comURLBounty eligible: Yes
decision.swiftfinancial.comURLBounty eligible: Yes
pigeon.swiftfinancial.comURLBounty eligible: Yes
scrutiny.swiftfinancial.comURLBounty eligible: Yes
www.swiftcapital.comURLBounty eligible: Yes
www.loanbuilder.comURLBounty eligible: Yes
www.swiftfinancial.comURLBounty eligible: Yes
api.swiftfinancial.comURLBounty eligible: Yes
my.swiftfinancial.comURLBounty eligible: Yes
api.loanbuilder.comURLBounty eligible: Yes
my.loanbuilder.comURLBounty eligible: Yes
loanbuilder.comURLBounty eligible: Yes
swiftfinancial.comURLBounty eligible: Yes
swiftcapital.comURLBounty eligible: Yes
Braintree SDKOTHERBounty eligible: Yes
PayPal SDKOTHERBounty eligible: Yes
com.xoom.android.appGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.paypal.merchant.clientGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.paypal.android.p2pmobileGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.venmoGOOGLE_PLAY_APP_IDBounty eligible: Yes
351727428APPLE_STORE_APP_IDBounty eligible: Yes
com.xoom.appAPPLE_STORE_APP_IDBounty eligible: Yes
com.paypal.merchantAPPLE_STORE_APP_IDBounty eligible: Yes
com.yourcompany.PPClientAPPLE_STORE_APP_IDBounty eligible: No
Out of scope · 8 published rows
AssetTypeGroup / eligibility
*.paypal.cnURLBounty eligible: No
braintree.comURLBounty eligible: No
www.gopay.comURLBounty eligible: No
www.paypal-support.comURLBounty eligible: No
*.atlassian.netOTHERBounty eligible: No
com.paypal.hereGOOGLE_PLAY_APP_IDBounty eligible: No
com.paypal.herehdAPPLE_STORE_APP_IDBounty eligible: No
com.paypal.hereAPPLE_STORE_APP_IDBounty eligible: No

Capture limits

  • Only the published asset table was captured; program rules and eligibility still require individual review.

Live policy and platform eligibility still require review.

Sources and collection identity

  1. Official program page Primary source · reviewed 2026-10-03
  2. Published scope source Primary source · reviewed 2026-10-03

Appears in Discovery, Bounty. No identity match is inferred from a shared company name.

GitHub snapshot 2026-10-04

d5550c789111 · JSON exports & schemas · CC BY 4.0 content / MIT software