BC Bugcrowd LIVE
Upwork
up to$5,000
Open on Bugcrowd ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- managed triage
- yes
12 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
Upwork - api.upwork.com/graphql | api | · | · | 2026-09-20 |
api.upwork.com/graphql | api | · | · | 2026-09-20 |
www.upwork.com/api | api | · | · | 2026-09-20 |
Direct Contracts | domain | · | · | 2026-09-20 |
Upwork - Marketplace Portal | domain | · | · | 2026-09-20 |
Upwork - Messages | domain | · | · | 2026-09-20 |
https://www.upwork.com | domain | · | · | 2026-09-20 |
Upwork Dash Messenger Desktop Version (www.upwork.com/downloads) | hardware | · | · | 2026-09-20 |
Upwork - Android Application | mobile | · | · | 2026-09-20 |
Upwork - Mobile Application Android | mobile | · | · | 2026-09-20 |
Upwork - Mobile Application IOS | mobile | · | · | 2026-09-20 |
Upwork - iOS Application | mobile | · | · | 2026-09-20 |
13 out of scope — black ICE, don't touch
tip.upwork.comdomainAny Third-party ServicesotherAny subdomain/domain/property not listed in the 'in scope' section, is out of scope.otherSocial media hijackingothercareers.upwork.comothercommunity.stage.upwork.comothercommunity.upwork.comothere.upwork.comotherpardot.upwork.comothersignature.upwork.comotherstage.upwork.comotherstatus.upwork.comothersupport.upwork.comother
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.