Vulnerability Disclosure Program (VDP)
VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.
expediagroup
33
In Scope
5
Out of Scope
In-Scope Assets (33)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| *.abritel.fr | WILDCARD | No | ||
| *.bookabach.co.nz | WILDCARD | No | ||
| *.carrentals.com | WILDCARD | No | ||
| *.cheaptickets.com | WILDCARD | No | ||
| *.cruiseshipcenters.com | WILDCARD | No | ||
| *.ean.com | WILDCARD | No | ||
| *.ebookers.com | WILDCARD | No | ||
| *.expedia.com | WILDCARD | No | ||
| *.expediagroup.com | WILDCARD | No | ||
| *.expediapartnercentral.com | WILDCARD | No | ||
| *.expediapartnersolutions.com | WILDCARD | No | ||
| *.fewo-direkt.de | WILDCARD | No | ||
| *.flights.com | WILDCARD | No | ||
| *.homeaway.com | WILDCARD | No | ||
| *.hotels.com | WILDCARD | No | ||
| *.hotwire.com | WILDCARD | No | ||
| *.hotwirepartnercentral.com | WILDCARD | No | ||
| *.lastminute.co.nz | WILDCARD | No | ||
| *.lastminute.com.au | WILDCARD | No | ||
| *.mrjet.se | WILDCARD | No | ||
| *.orbitz.com | WILDCARD | No | ||
| *.stayz.com.au | WILDCARD | No | ||
| *.travelocity.ca | WILDCARD | No | ||
| *.travelocity.com | WILDCARD | No | ||
| *.vrbo.com | WILDCARD | No | ||
| *.wotif.com | WILDCARD | No | ||
| 987675995 | IOS | No | - | |
| Other Expedia-owned Asset | OTHER | No | - | |
| com.expediapartnercentral | ANDROID | No | ||
| http://www.cruiseshipcenters.com/api/searchcenter | URL | No | ||
| www.ebookers.fi | URL | No | ||
| www.expedia-aarp.com | URL | No | ||
| www.vrbo.com | URL | No |
Out-of-Scope Assets (5)
| Asset | Category | Bounty | |
|---|---|---|---|
| *.egadvertising.com | WILDCARD | No | |
| *.expediaagents.com | WILDCARD | No | |
| *.expediacruises.com | WILDCARD | No | |
| *.hoteis.com | WILDCARD | No | |
| *.hoteles.com | WILDCARD | No |