Bug bounty program · HackerOne
Most upvoted reports91
- #3800870Validconnect.8x8.com/api/v1: JWT Algorithm Confusion Vulnerability8x8 · Cryptography · 2026 · High$1,337111votes
- #2078490ValidStored xss at https://█.8x8.com/api/█/ID8x8 · Cross-site Scripting · 2023$1,337108votes
- #1474536Validconnect.8x8.com: admin user can send invites on behalf of another admin user via POST /api/v1/users/<User ID>/invites8x8 · Access Control · 2023–105votes
- #1365076ValidInformation Disclosure of metrics fax.wavecell.com/metrics8x8 · Information Disclosure · 2025 · Low–93votes
- #3250315Valid█.8x8.vc/index.js: Exposed Google Maps API Key Allowing Potential Abuse of Paid Services8x8 · Information Disclosure · 2025 · Medium$50088votes
- #3789570Validjitsi-meet: Prosody/Jigasi missing header whitelist in mod_filter_iq_rayo allows arbitrary SIP header injection and Caller ID spoofing8x8 · Input Validation and Logic · 2026 · Low$10072votes
- #3485343Validjitsi-call-analytics: Unauthenticated arbitrary file write via path traversal in `/api/v1/uploads/analyze`8x8 · File and Path Handling · 2026 · Low · no account (title)$10068votes
- #1875484Validconnect.8x8.com: Blind SSRF via /api/v2/chats/image-check allows for Internal Ports scan8x8 · Server-Side Request Forgery · 2023–65votes
- #3837634ValidJaaS SIP Gateway Authorization Bypass8x8 · Access Control · 2026 · Medium$50064votes
- #1692603ValidJitsi Desktop Client RCE By Interacting with Malicious URL Schemes on Windows8x8 · Command and Code Injection · 2023$77751votes
Subdomains9,482
7,296 covered by the program's own scope · 0 first seen this week
Roots:8x8.com 4,531 · 4,349 in scopedxi.eu 1,780ucverse.com 1,285 · 1,285 in scopepacket8.net 692 · 692 in scopejitsi.net 404 · 404 in scope8x8.vc 231 · 231 in scopemycontactual.com 155wavecell.com 106 · 103 in scope8x8cloud.net 105 · 105 in scope8x8pilot.com 64 · 64 in scopejitsi.org 328x8staging.com 28 · 28 in scopejit.si 28 · 28 in scopesameroom.io 16easycontactnow.com 12p8t.us 7 · 7 in scopeget8x8.com 68x8.spot 0
Name suggestsAnything
9,482 names
| Name | Scope | First seen |
|---|---|---|
| 103-239-164-3.0.8x8.com | In scope | 2026-11-14 |
| 103-239-164-64.0.8x8.com | In scope | 2026-11-14 |
| 103-239-164-95.0.8x8.com | In scope | 2026-11-14 |
| 103-252-162-179.0.8x8.com | In scope | 2026-11-14 |
| 162-221-236-142.0.8x8.com | In scope | 2026-11-14 |
| 162-221-236-88.0.8x8.com | In scope | 2026-11-14 |
| 162-221-237-64.0.8x8.com | In scope | 2026-11-14 |
| 162-221-239-173.0.8x8.com | In scope | 2026-11-14 |
| 192-84-18-100.0.8x8.com | In scope | 2026-11-14 |
| 5.0.8x8.com | In scope | 2026-11-14 |
| 8-28-2-162.0.8x8.com | In scope | 2026-11-14 |
| a.0.8x8.com | In scope | 2026-11-14 |
| aerialinstallation.0.8x8.com | In scope | 2026-11-14 |
| alpha.0.8x8.comstaging | In scope | 2026-11-14 |
| cusa.0.8x8.com | In scope | 2026-11-14 |
| download.0.8x8.com | In scope | 2026-11-14 |
| is.0.8x8.com | In scope | 2026-11-14 |
| trener2.0.8x8.com | In scope | 2026-11-14 |
| wiki-3.0.8x8.comtools | In scope | 2026-11-14 |
| 1-236-229.8x8.com | In scope | 2026-11-14 |
| 103-239-164-95.1.8x8.com | In scope | 2026-11-14 |
| 103-252-162-177.1.8x8.com | In scope | 2026-11-14 |
| 103-252-162-43.1.8x8.com | In scope | 2026-11-14 |
| 162-221-236-201.1.8x8.com | In scope | 2026-11-14 |
| 162-221-236-222.1.8x8.com | In scope | 2026-11-14 |
| 162-221-236-228.1.8x8.com | In scope | 2026-11-14 |
| 192-84-18-120.1.8x8.com | In scope | 2026-11-14 |
| 252-213.1.8x8.com | In scope | 2026-11-14 |
| 4.1.8x8.com | In scope | 2026-11-14 |
| 8-5-248-103.1.8x8.com | In scope | 2026-11-14 |
| 8-5-248-204.1.8x8.com | In scope | 2026-11-14 |
| abbeylanguagetravel.1.8x8.com | In scope | 2026-11-14 |
| accounts.1.8x8.com | In scope | 2026-11-14 |
| avwilliams.1.8x8.com | In scope | 2026-11-14 |
| brewsterhomefashions.1.8x8.com | In scope | 2026-11-14 |
| dev.1.8x8.comdev | In scope | 2026-11-14 |
| draftsite.1.8x8.com | In scope | 2026-11-14 |
| fireresponse.1.8x8.com | In scope | 2026-11-14 |
| mail.1.8x8.commail | In scope | 2026-11-14 |
| manager.1.8x8.comadmin | In scope | 2026-11-14 |
| mtisametals.1.8x8.com | In scope | 2026-11-14 |
| neatfreakme.1.8x8.com | In scope | 2026-11-14 |
| newcastlerescue.1.8x8.com | In scope | 2026-11-14 |
| occ-0-1123-1567.1.8x8.com | In scope | 2026-11-14 |
| occ-0-1500-401.1.8x8.com | In scope | 2026-11-14 |
| occ-0-55-768.1.8x8.com | In scope | 2026-11-14 |
| occ-1-1007-1361.1.8x8.com | In scope | 2026-11-14 |
| occ-1-1489-1490.1.8x8.com | In scope | 2026-11-14 |
| occ-1-2218-2219.1.8x8.com | In scope | 2026-11-14 |
| officedepot.1.8x8.com | In scope | 2026-11-14 |
| plusbusiness.1.8x8.com | In scope | 2026-11-14 |
| sales.1.8x8.com | In scope | 2026-11-14 |
| sandbox.1.8x8.comtest | In scope | 2026-11-14 |
| server.1.8x8.com | In scope | 2026-11-14 |
| sorgentenatura.1.8x8.com | In scope | 2026-11-14 |
| test.1.8x8.comtest | In scope | 2026-11-14 |
| vcc-ap1.1.8x8.com | In scope | 2026-11-14 |
| vcc-lantronix01-us2.1.8x8.com | In scope | 2026-11-14 |
| vcc-qa3.1.8x8.com | In scope | 2026-11-14 |
| viopalpha.1.8x8.com | In scope | 2026-11-14 |
| vo-cm.1.8x8.com | In scope | 2026-11-14 |
| webdisk.1.8x8.com | In scope | 2026-11-14 |
| webmail.1.8x8.commail | In scope | 2026-11-14 |
| wellstoresrl.1.8x8.com | In scope | 2026-11-14 |
| williamsdesignerhomes.1.8x8.com | In scope | 2026-11-14 |
| www.1.8x8.com | In scope | 2026-11-14 |
| wwwbrandatticcom.1.8x8.com | In scope | 2026-11-14 |
| 10174.8x8.com | In scope | 2026-11-14 |
| 103-239-164-0.8x8.com | In scope | 2026-11-14 |
| 103-239-164-1.8x8.com | In scope | 2026-11-14 |
| 103-239-164-10.8x8.com | In scope | 2026-11-14 |
| 103-239-164-100.8x8.com | In scope | 2026-11-14 |
| 103-239-164-101.8x8.com | In scope | 2026-11-14 |
| 103-239-164-102.8x8.com | In scope | 2026-11-14 |
| 103-239-164-103.8x8.com | In scope | 2026-11-14 |
| 103-239-164-104.8x8.com | In scope | 2026-11-14 |
| 103-239-164-105.8x8.com | In scope | 2026-11-14 |
| 103-239-164-106.8x8.com | In scope | 2026-11-14 |
| 103-239-164-107.8x8.com | In scope | 2026-11-14 |
| 103-239-164-108.8x8.com | In scope | 2026-11-14 |
| 103-239-164-109.8x8.com | In scope | 2026-11-14 |
| 103-239-164-11.8x8.com | In scope | 2026-11-14 |
| 103-239-164-110.8x8.com | In scope | 2026-11-14 |
| 103-239-164-111.8x8.com | In scope | 2026-11-14 |
| 103-239-164-112.8x8.com | In scope | 2026-11-14 |
| 103-239-164-113.8x8.com | In scope | 2026-11-14 |
| 103-239-164-114.8x8.com | In scope | 2026-11-14 |
| 103-239-164-115.8x8.com | In scope | 2026-11-14 |
| 103-239-164-116.8x8.com | In scope | 2026-11-14 |
| 103-239-164-117.8x8.com | In scope | 2026-11-14 |
| 103-239-164-118.8x8.com | In scope | 2026-11-14 |
| 103-239-164-119.8x8.com | In scope | 2026-11-14 |
| 103-239-164-12.8x8.com | In scope | 2026-11-14 |
| 103-239-164-120.8x8.com | In scope | 2026-11-14 |
| 103-239-164-121.8x8.com | In scope | 2026-11-14 |
| 103-239-164-122.8x8.com | In scope | 2026-11-14 |
| 103-239-164-123.8x8.com | In scope | 2026-11-14 |
| 103-239-164-124.8x8.com | In scope | 2026-11-14 |
| 103-239-164-125.8x8.com | In scope | 2026-11-14 |
| 103-239-164-126.8x8.com | In scope | 2026-11-14 |
Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. See the subdomains on the Atlas.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.