Skip to content
Learn more about root-me.cloud
Log in

MediSync (demo): Scope

Download CSVLast updated on
1-4 of 4
Assets of MediSync (demo)
Asset nameTypeCoverageMax. severityLast updateResolved Reports

portal.medisync.example

The patient portal — everything is behind the login.

  • dotnet
DomainIn scopeCritical0 (0%)

api.medisync.example

Records, appointments and messaging API. Access-control and IDOR reports are highest value.

  • dotnet
  • sqlserver
APIIn scopeCritical0 (0%)

*.medisync.example

MediSync-operated subdomains, except those out of scope.

WildcardIn scopeCritical0 (0%)

careers.medisync.example

Out of scope: recruiting site on a third-party platform.

OtherOut of scopeNone0 (0%)

1-4 of 4

Rewards

This is a vulnerability disclosure program: it does not pay cash rewards. Every resolved report earns reputation and a public thank-you on the Thanks page.

SeverityReputation
Low+10 reputation
Medium+15 reputation
High+22 reputation
Critical+32 reputation

Earned when a report is resolved at that severity. How reputation works

Stats

Reports received | 90 days
0
Last report resolved
–
Reports resolved
0
Hackers thanked
0
Assets in scope
3