vulns.co
/
GKData.io MCP

HackerOne · 3 min read

Vimeo

Paid Bounty

Open current program Scope capture

What this record establishes

Scope capture

Published asset rows were captured. The full policy and eligibility were not individually reviewed.

Directory row 438; Active program checkbox checked; Bounties minimum displayed $100. Positive displayed minimum supports paid bounty listing. Policy and live submission availability unverified.

Published asset scope

Snapshot captured 2026-10-03. Scope status: Captured.

In scope · 30 published rows
AssetTypeGroup / eligibility
*.cloud.vimeo.comWILDCARDBounty eligible: Yes
*.vimeo.comWILDCARDBounty eligible: Yes
*.vhx.tvWILDCARDBounty eligible: Yes
*.magisto.comWILDCARDBounty eligible: Yes
www.vimeo.comURLBounty eligible: Yes
player.vimeo.comURLBounty eligible: Yes
api.vimeo.comURLBounty eligible: Yes
vimeopro.comURLBounty eligible: Yes
http://vimeo.com/ondemandURLBounty eligible: Yes
http://vimeo.com/apiURLBounty eligible: Yes
checkout.vimeo.comURLBounty eligible: Yes
http://vimeo.com/createURLBounty eligible: Yes
vimeo.magisto.comURLBounty eligible: Yes
vhx.tvURLBounty eligible: Yes
embed.vhx.tvURLBounty eligible: Yes
api.vhx.tvURLBounty eligible: Yes
magisto.com,www.magisto.comURLBounty eligible: Yes
staging.magisto.comURLBounty eligible: Yes
applause1.magisto.comURLBounty eligible: Yes
channelstore.roku.com/details/48061/vhxOTHERBounty eligible: Yes
VHX Branded Customer iOS AppsOTHERBounty eligible: Yes
VHX Branded Customer Android AppsOTHERBounty eligible: Yes
VHX Branded Customer Roku AppsOTHERBounty eligible: Yes
com.vimeo.android.videoappGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.vimeocreate.videoeditor.moviemakerGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.magistoGOOGLE_PLAY_APP_IDBounty eligible: Yes
425194759APPLE_STORE_APP_IDBounty eligible: Yes
1491791513APPLE_STORE_APP_IDBounty eligible: Yes
486781045APPLE_STORE_APP_IDBounty eligible: Yes
493086499APPLE_STORE_APP_IDBounty eligible: Yes
Out of scope · 39 published rows
AssetTypeGroup / eligibility
AllWINDOWS_APP_STORE_APP_IDBounty eligible: No
*.email.vimeo.comWILDCARDBounty eligible: No
*.wirewax.comWILDCARDBounty eligible: No
*.wirewax.appWILDCARDBounty eligible: No
*.wibbitz.comWILDCARDBounty eligible: No
*.test.magisto.comWILDCARDBounty eligible: No
*.dev.magisto.comWILDCARDBounty eligible: No
*.cdn.magisto.comWILDCARDBounty eligible: No
*.livestream.comWILDCARDBounty eligible: No
*.new.livestream.comWILDCARDBounty eligible: No
*.boost.livestream.com,boost.livestream.comWILDCARDBounty eligible: No
vimeo.atlassian.netURLBounty eligible: No
applause2.magisto.comURLBounty eligible: No
gamma.magisto.comURLBounty eligible: No
delta.magisto.comURLBounty eligible: No
int001.vimeo.magisto.comURLBounty eligible: No
int002.vimeo.magisto.comURLBounty eligible: No
int003.vimeo.magisto.comURLBounty eligible: No
int004.vimeo.magisto.comURLBounty eligible: No
int005vimeo.magisto.comURLBounty eligible: No
eta.magisto.comURLBounty eligible: No
epsilon.magisto.comURLBounty eligible: No
http://www.magisto.com/blogURLBounty eligible: No
omega.magisto.comURLBounty eligible: No
www.livestream.comURLBounty eligible: No
donations.livestream.comURLBounty eligible: No
livestreamapis.comURLBounty eligible: No
store.livestream.comURLBounty eligible: No
publishing-api.livestream.comURLBounty eligible: No
help.livestream.comURLBounty eligible: No
status.livestream.comURLBounty eligible: No
billing-account.vimeo.comURLBounty eligible: No
Livestream software (Producer, Studio)OTHERBounty eligible: No
s3://static.intercast-livestream.comOTHERBounty eligible: No
livestream.com/blog, *.livestream.com/blog, blog.livestream.comOTHERBounty eligible: No
Any previously owned/sold hardwareHARDWAREBounty eligible: No
tv.vhxGOOGLE_PLAY_APP_IDBounty eligible: No
com.livestream.livestreamGOOGLE_PLAY_APP_IDBounty eligible: No
935740658APPLE_STORE_APP_IDBounty eligible: No

Capture limits

  • Only the published asset table was captured; program rules and eligibility still require individual review.

Live policy and platform eligibility still require review.

Sources and collection identity

  1. Official program page Primary source · reviewed 2026-10-03
  2. Published scope source Primary source · reviewed 2026-10-03

Appears in Discovery, Bounty. No identity match is inferred from a shared company name.

GitHub snapshot 2026-10-04

d5550c789111 · JSON exports & schemas · CC BY 4.0 content / MIT software