H1 HackerOne LIVE
Vimeo
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://vimeo.com
- managed triage
- yes
- response efficiency
- 97%
- first response
- 4h avg
- time to bounty
- 48h avg
30 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
api.vhx.tv | domain | yes | critical | 2026-09-20 |
api.vimeo.com | domain | yes | critical | 2026-09-20 |
applause1.magisto.com | domain | yes | critical | 2026-09-20 |
checkout.vimeo.com | domain | yes | critical | 2026-09-20 |
embed.vhx.tv | domain | yes | critical | 2026-09-20 |
http://vimeo.com/api | domain | yes | critical | 2026-09-20 |
http://vimeo.com/create | domain | yes | critical | 2026-09-20 |
http://vimeo.com/ondemand | domain | yes | critical | 2026-09-20 |
magisto.com,www.magisto.com | domain | yes | critical | 2026-09-20 |
player.vimeo.com | domain | yes | critical | 2026-09-20 |
staging.magisto.com | domain | yes | critical | 2026-09-20 |
vhx.tv | domain | yes | critical | 2026-09-20 |
vimeo.magisto.com | domain | yes | critical | 2026-09-20 |
vimeopro.com | domain | yes | critical | 2026-09-20 |
www.vimeo.com | domain | yes | critical | 2026-09-20 |
1491791513 | mobile | yes | critical | 2026-09-20 |
425194759 | mobile | yes | critical | 2026-09-20 |
486781045 | mobile | yes | critical | 2026-09-20 |
493086499 | mobile | yes | critical | 2026-09-20 |
com.magisto | mobile | yes | critical | 2026-09-20 |
com.vimeo.android.videoapp | mobile | yes | critical | 2026-09-20 |
com.vimeocreate.videoeditor.moviemaker | mobile | yes | critical | 2026-09-20 |
VHX Branded Customer Android Apps | other | yes | critical | 2026-09-20 |
VHX Branded Customer Roku Apps | other | yes | critical | 2026-09-20 |
VHX Branded Customer iOS Apps | other | yes | critical | 2026-09-20 |
channelstore.roku.com/details/48061/vhx | other | yes | critical | 2026-09-20 |
*.cloud.vimeo.com | wildcard | yes | critical | 2026-09-20 |
*.magisto.com | wildcard | yes | critical | 2026-09-20 |
*.vhx.tv | wildcard | yes | critical | 2026-09-20 |
*.vimeo.com | wildcard | yes | critical | 2026-09-20 |
39 out of scope — black ICE, don't touch
applause2.magisto.comdomainbilling-account.vimeo.comdomaindelta.magisto.comdomaindonations.livestream.comdomainepsilon.magisto.comdomaineta.magisto.comdomaingamma.magisto.comdomainhelp.livestream.comdomainhttp://www.magisto.com/blogdomainint001.vimeo.magisto.comdomainint002.vimeo.magisto.comdomainint003.vimeo.magisto.comdomainint004.vimeo.magisto.comdomainint005vimeo.magisto.comdomainlivestreamapis.comdomainomega.magisto.comdomainpublishing-api.livestream.comdomainstatus.livestream.comdomainstore.livestream.comdomainvimeo.atlassian.netdomainwww.livestream.comdomainAllexecutableAny previously owned/sold hardwarehardware935740658mobilecom.livestream.livestreammobiletv.vhxmobileLivestream software (Producer, Studio)otherlivestream.com/blog, *.livestream.com/blog, blog.livestream.comothers3://static.intercast-livestream.comother*.boost.livestream.com,boost.livestream.comwildcard*.cdn.magisto.comwildcard*.dev.magisto.comwildcard*.email.vimeo.comwildcard*.livestream.comwildcard*.new.livestream.comwildcard*.test.magisto.comwildcard*.wibbitz.comwildcard*.wirewax.appwildcard*.wirewax.comwildcard
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.