H1 HackerOne LIVE
The Walt Disney Company
no bountyVDP
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://thewaltdisneycompany.com/
- managed triage
- yes
- response efficiency
- 62%
- first response
- 1h avg
17 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
abcspotdepot.com | domain | no | critical | 2026-09-20 |
disneyauditions.com | domain | no | critical | 2026-09-20 |
disneyland.disney.go.com | domain | no | critical | 2026-09-20 |
disneyplus.link | domain | no | critical | 2026-09-20 |
disneytravelagents.com | domain | no | critical | 2026-09-20 |
disneyvacationclub.disney.go.com | domain | no | critical | 2026-09-20 |
dvc-lightcycle-api.wdprapps.disney.com | domain | no | critical | 2026-09-20 |
espn.com | domain | no | critical | 2026-09-20 |
shanghaidisneyresort.com.cn | domain | no | critical | 2026-09-20 |
www.magicalphotos.cn | domain | no | critical | 2026-09-20 |
www.shanghaidisneyresort.com | domain | no | critical | 2026-09-20 |
www.shanghaidisneyresort.com.cn | domain | no | critical | 2026-09-20 |
com.espn.score_center | mobile | no | critical | 2026-09-20 |
id317469184 | mobile | no | critical | 2026-09-20 |
Disney Corporate | other | no | critical | 2026-09-20 |
MyID Pre-auth Bypass | other | no | critical | 2026-09-20 |
Valid Disney Retiree Credential | other | no | medium | 2026-09-20 |
14 out of scope — black ICE, don't touch
affiliate.disney.espn.codomaindolimg.comdomaindwss-ptp.disney.comdomainespnbet.comdomainhotstar.comdomainkingdomhearts.comdomainmagicalfloralandgifts.comdomainmagicpass.com.mxdomainstar.comdomaintokyodisneyresort.jpdomainunclaimedproperty.disney.comdomainwww.disneyexibidor.com.brdomainwww.enchantedfinejewelry.comdomainwww.waltdisney.orgdomain
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.