— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for SHEIN.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
{
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": null,
"average_time_to_first_program_response": 3,
"average_time_to_report_resolved": null,
"handle": "shein",
"id": 0,
"managed_program": true,
"name": "SHEIN",
"offers_bounties": true,
"offers_swag": false,
"response_efficiency_percentage": 72,
"submission_state": "open",
"url": "https://hackerone.com/shein",
"website": "http://shein.com",
"targets": {
"in_scope": [
{
"asset_identifier": "*.romwe.com",
"asset_type": "WILDCARD",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "*.romwe. [com | co.in ]\n.romwe.org\n\n1. **Please note that if the exact same vulnerability is found on different top-level domains listed above (ie: .com, .co.in and .org), please do not submit multiple reports. Any duplicate reports submitted will be treated as such.**\n\n2. Please read the \"Important guidelines regarding cross-host vulnerabilities\" section of the policy page as the guidelines apply for this asset.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "*.shein.com",
"asset_type": "WILDCARD",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "*.shein.[com | in | tw | se | com.hk | com.vn | com.mx | co.uk ]\n\n1. **Please note that if the exact same vulnerability is found on different top-level domains listed above (example: .com, .in, .tw etc), please do not submit multiple reports. Any duplicate reports submitted will be treated as such.**\n\n2. Please read the \"Important guidelines regarding cross-host vulnerabilities\" section of the policy page as the guidelines apply for this asset.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "*.sheingsp.com",
"asset_type": "WILDCARD",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "1080248000",
"asset_type": "APPLE_STORE_APP_ID",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "[ROMWE - Fashion Store](https://apps.apple.com/app/romwe-fashion-store/id1080248000) on the Apple App Store \n",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "878577184",
"asset_type": "APPLE_STORE_APP_ID",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "[SHEIN-Fashion Shopping Online](https://apps.apple.com/app/shein-fashion-shopping-online/id878577184) on the Apple App Store \n",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "com.romwe",
"asset_type": "GOOGLE_PLAY_APP_ID",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "[ROMWE](https://play.google.com/store/apps/details?id=com.romwe) on the Google Play Store\n",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "com.zzkko",
"asset_type": "GOOGLE_PLAY_APP_ID",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "[SHEIN-Fashion Shopping Online](https://play.google.com/store/apps/details?id=com.zzkko) on the Google Play Store\n\n",
"integrity_requirement": null,
"max_severity": "critical"
}
],
"out_of_scope": []
}
}1080248000· critical878577184· critical— none listed —