citti-handelsgesellschafft-bug-bounty-program
13
In Scope
4
Out of Scope
In-Scope Assets (13)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| https://cittimarkt.de | URL | Yes | ||
| https://lieferanten.citti.de | URL | Yes | ||
| https://shop.chefsculinar.[de|at|nl] | URL | Yes | - | |
| https://www.citti-park-flensburg.de | URL | Yes | ||
| https://www.citti-park-kiel.de | URL | Yes | ||
| https://www.citti-park-luebeck.de | URL | Yes | ||
| https://www.citti-park-rostock.de | URL | Yes | ||
| https://www.citti-park.de | URL | Yes | ||
| https://www.citti.de | URL | Yes | ||
| https://www.hms-services.com | URL | Yes | ||
| https://www.hoka.dk | URL | Yes | ||
| https://www.ostseecenter-stralsund.de | URL | Yes | ||
| https://www.strelapark.de | URL | Yes |
Out-of-Scope Assets (4)
| Asset | Category | Bounty | |
|---|---|---|---|
| All domains or subdomains not listed in the above list of 'Scopes' | OTHER | Yes | |
| Citti.[dk|no|se] | OTHER | Yes | |
| Further the endpoints https://cittimarkt.de/citti-card and https://www.citti.[no|se|dk]/citti-card is also out of scope | OTHER | Yes | |
| https://www.chefsculinar.[de|at|pl|nl] | OTHER | Yes |
Scope Changes (17)
Apr 16, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | https://lieferanten.citti.de | URL | In Scope | 18:33 |
| Added | https://cittimarkt.de | URL | In Scope | 18:33 |
| Added | https://www.hoka.dk | URL | In Scope | 18:33 |
| Added | https://shop.chefsculinar.[de|at|nl] | URL | In Scope | 18:33 |
| Added | https://www.hms-services.com | URL | In Scope | 18:33 |
| Added | https://www.citti.de | URL | In Scope | 18:33 |
| Added | https://www.citti-park.de | URL | In Scope | 18:33 |
| Added | https://www.citti-park-flensburg.de | URL | In Scope | 18:33 |
| Added | https://www.citti-park-kiel.de | URL | In Scope | 18:33 |
| Added | https://www.citti-park-luebeck.de | URL | In Scope | 18:33 |
| Added | https://www.citti-park-rostock.de | URL | In Scope | 18:33 |
| Added | https://www.strelapark.de | URL | In Scope | 18:33 |
| Added | https://www.ostseecenter-stralsund.de | URL | In Scope | 18:33 |
| Added | all domains or subdomains not listed in the above list of 'scopes' | OTHER | Out of Scope | 18:33 |
| Added | further the endpoints https://cittimarkt.de/citti-card and https://www.citti.[no|se|dk]/citti-card is also out of scope | OTHER | Out of Scope | 18:33 |
| Added | citti.[dk|no|se] | OTHER | Out of Scope | 18:33 |
| Added | https://www.chefsculinar.[de|at|pl|nl] | OTHER | Out of Scope | 18:33 |