Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670
Vendor on CyberSIXT
Equifax (1 CVE, 0 exploited)

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.comAnalysed#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source code#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
coxmediagroup.github.comNot in the scope2026-11-14
coxy.github.comNot in the scope2026-11-14
coyote.github.comNot in the scope2026-11-14
cozuya.github.comNot in the scope2026-11-14
cozybit.github.comNot in the scope2026-11-14
cp.github.comNot in the scope2026-11-14
builder.cp.github.comNot in the scope2026-11-14
ftp.cp.github.comdataNot in the scope2026-11-14
webmail.cp.github.commailNot in the scope2026-11-14
www.cp.github.comNot in the scope2026-11-14
cp01.github.comNot in the scope2026-11-14
cp01int.github.comNot in the scope2026-11-14
cp1.github.comNot in the scope2026-11-14
cp2.github.comNot in the scope2026-11-14
cp3.github.comNot in the scope2026-11-14
cp4.github.comNot in the scope2026-11-14
cp5.github.comNot in the scope2026-11-14
cpa.github.comNot in the scope2026-11-14
www.cpa.github.comNot in the scope2026-11-14
cpalmer-ios.github.comNot in the scope2026-11-14
cpan.github.comNot in the scope2026-11-14
cpanel.github.comadminNot in the scope2026-11-14
builder.cpanel.github.comadminNot in the scope2026-11-14
webmail.cpanel.github.comadmin, mailNot in the scope2026-11-14
www.cpanel.github.comadminNot in the scope2026-11-14
cpanel1.github.comadminNot in the scope2026-11-14
cpanel2.github.comadminNot in the scope2026-11-14
cpanel3.github.comadminNot in the scope2026-11-14
cpayan.github.comNot in the scope2026-11-14
cpc.github.comNot in the scope2026-11-14
cpd.github.comNot in the scope2026-11-14
cpdean.github.comNot in the scope2026-11-14
cpe.github.comNot in the scope2026-11-14
cpecnwlr.github.comNot in the scope2026-11-14
cpence.github.comNot in the scope2026-11-14
cpetersen.github.comNot in the scope2026-11-14
cpettitt.github.comNot in the scope2026-11-14
cphjig.github.comNot in the scope2026-11-14
cpilko.github.comNot in the scope2026-11-14
cpjobling.github.comNot in the scope2026-11-14
cpjolicoeur.github.comNot in the scope2026-11-14
cpl.github.comNot in the scope2026-11-14
cploginky.github.comNot in the scope2026-11-14
cploginoh.github.comNot in the scope2026-11-14
cplusplus.github.comNot in the scope2026-11-14
cpm.github.comNot in the scope2026-11-14
cpn.github.comNot in the scope2026-11-14
cpnew.github.comNot in the scope2026-11-14
cpoonolly.github.comNot in the scope2026-11-14
cpp.github.comNot in the scope2026-11-14
cpp-netib.github.comNot in the scope2026-11-14
cpp-netlib.github.comNot in the scope2026-11-14
cpputest.github.comNot in the scope2026-11-14
cpqd.github.comNot in the scope2026-11-14
cps.github.comNot in the scope2026-11-14
www.cps.github.comNot in the scope2026-11-14
cpsievert.github.comNot in the scope2026-11-14
cpt.github.comNot in the scope2026-11-14
cptest.github.comNot in the scope2026-11-14
cptjason.github.comNot in the scope2026-11-14
cpw.github.comNot in the scope2026-11-14
cpytel.github.comNot in the scope2026-11-14
cq.github.comNot in the scope2026-11-14
cqrsjourney.github.comNot in the scope2026-11-14
cr.github.comNot in the scope2026-11-14
cr0t.github.comNot in the scope2026-11-14
cr0ybot.github.comNot in the scope2026-11-14
cra.github.comNot in the scope2026-11-14
crabasa.github.comNot in the scope2026-11-14
crackcell.github.comNot in the scope2026-11-14
cracker.github.comNot in the scope2026-11-14
crackersnack.github.comNot in the scope2026-11-14
cradle.github.comNot in the scope2026-11-14
craeon.github.comNot in the scope2026-11-14
crafity.github.comNot in the scope2026-11-14
craft.github.comNot in the scope2026-11-14
crafts.github.comNot in the scope2026-11-14
craftserve.github.comNot in the scope2026-11-14
craftyjs.github.comNot in the scope2026-11-14
craga89.github.comNot in the scope2026-11-14
craga89antivirus.github.comNot in the scope2026-11-14
craic.github.comNot in the scope2026-11-14
craig.github.comNot in the scope2026-11-14
craig0990.github.comNot in the scope2026-11-14
craig552uk.github.comNot in the scope2026-11-14
craig552ukantivirus.github.comNot in the scope2026-11-14
craigchristenson.github.comNot in the scope2026-11-14
craigcoles.github.comNot in the scope2026-11-14
craigcottingham.github.comNot in the scope2026-11-14
craigdavey.github.comNot in the scope2026-11-14
craigfrancis.github.comNot in the scope2026-11-14
craigmarksmith.github.comNot in the scope2026-11-14
craigmccoy.github.comNot in the scope2026-11-14
craigmccoyantivirus.github.comNot in the scope2026-11-14
craigp.github.comNot in the scope2026-11-14
craigsdennis.github.comNot in the scope2026-11-14
craigstuntz.github.comNot in the scope2026-11-14
craigw.github.comNot in the scope2026-11-14
craigwaterman.github.comNot in the scope2026-11-14
craiova.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.