loreal-global-private-program
5
In Scope
2
Out of Scope
In-Scope Assets (5)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| https://vbc-bugbounty-np.beauty.tech/ | URL | Yes | ||
| nglora.e-loreal.com | URL | Yes | ||
| www.aesop.com | URL | Yes | ||
| www.loreal-finance.com | URL | Yes | ||
| www.loreal.com | URL | Yes |
Out-of-Scope Assets (2)
| Asset | Category | Bounty | |
|---|---|---|---|
| All AI prompt-injection attacks, except those that result in data leakage. | OTHER | Yes | |
| All other domains and subdomains are not eligible for bounty. | OTHER | Yes |
Scope Changes (7)
Apr 16, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | www.aesop.com | URL | In Scope | 18:33 |
| Added | www.loreal-finance.com | URL | In Scope | 18:33 |
| Added | www.loreal.com | URL | In Scope | 18:33 |
| Added | nglora.e-loreal.com | URL | In Scope | 18:33 |
| Added | https://vbc-bugbounty-np.beauty.tech/ | URL | In Scope | 18:33 |
| Added | all other domains and subdomains are not eligible for bounty | OTHER | Out of Scope | 18:33 |
| Added | all ai prompt-injection attacks, except those that result in data leakage | OTHER | Out of Scope | 18:33 |