Bug bounty program
EV
Equifax-vdp
Most upvoted reports7
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Important information leaked on GithubAnalysed#649322 | Authentication | 2019-08-22 | – | 98 |
| reflected XSS in [www.equifax.com]Analysed#1818163 | Cross-site Scripting | 2023-04-23 | – | 47 |
| Subdomain takeover at http://test.www.midigator.comAnalysed#1718371 | Access Control | 2022-11-12 | – | 32 |
| Open SonarQube instance leaking internal source codeAnalysed#947946 | Information Disclosure | 2020-09-03 | – | 20 |
| reflected XSS in [www.equifax.com]Analysed#1818172 | Cross-site Scripting | 2023-04-23 | – | 19 |
| Information Leak (Github)#694931 | No weakness recorded | 2020-04-09 | – | 17 |
| RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638 | Cross-site Scripting | 2022-03-09 | – | 6 |
Subdomains55,670
| Name | Scope | First seen |
|---|---|---|
| datajoint.github.com | Not in the scope | 2026-11-14 |
| datakurre.github.com | Not in the scope | 2026-11-14 |
| datalab.github.com | Not in the scope | 2026-11-14 |
| datalad-api.github.comapi | Not in the scope | 2026-11-14 |
| datamade.github.com | Not in the scope | 2026-11-14 |
| datamapper.github.com | Not in the scope | 2026-11-14 |
| datamaps.github.com | Not in the scope | 2026-11-14 |
| datamuc.github.com | Not in the scope | 2026-11-14 |
| datanomisch.github.com | Not in the scope | 2026-11-14 |
| dataorigin.github.com | Not in the scope | 2026-11-14 |
| datapimp.github.com | Not in the scope | 2026-11-14 |
| dataprev.github.com | Not in the scope | 2026-11-14 |
| dataprophet.github.com | Not in the scope | 2026-11-14 |
| datarchy.github.com | Not in the scope | 2026-11-14 |
| datarhei.github.com | Not in the scope | 2026-11-14 |
| dataservices.github.com | Not in the scope | 2026-11-14 |
| datasets.github.com | Not in the scope | 2026-11-14 |
| datasift.github.com | Not in the scope | 2026-11-14 |
| datastax.github.com | Not in the scope | 2026-11-14 |
| datasulis.github.com | Not in the scope | 2026-11-14 |
| datasync.github.com | Not in the scope | 2026-11-14 |
| datatables.github.com | Not in the scope | 2026-11-14 |
| datatables4j.github.com | Not in the scope | 2026-11-14 |
| datatheorem.github.com | Not in the scope | 2026-11-14 |
| datauy.github.com | Not in the scope | 2026-11-14 |
| dataviz.github.com | Not in the scope | 2026-11-14 |
| datawolf.github.com | Not in the scope | 2026-11-14 |
| datawraith.github.com | Not in the scope | 2026-11-14 |
| date.github.com | Not in the scope | 2026-11-14 |
| www.date.github.com | Not in the scope | 2026-11-14 |
| datenschutz.github.com | Not in the scope | 2026-11-14 |
| datil.github.com | Not in the scope | 2026-11-14 |
| dating.github.com | Not in the scope | 2026-11-14 |
| webdisk.dating.github.com | Not in the scope | 2026-11-14 |
| www.dating.github.com | Not in the scope | 2026-11-14 |
| dattaya.github.com | Not in the scope | 2026-11-14 |
| daugia.github.com | Not in the scope | 2026-11-14 |
| daum.github.com | Not in the scope | 2026-11-14 |
| dauphin.github.com | Not in the scope | 2026-11-14 |
| dauphinstop.github.com | Not in the scope | 2026-11-14 |
| dav.github.com | Not in the scope | 2026-11-14 |
| dav1dde.github.com | Not in the scope | 2026-11-14 |
| davare.github.com | Not in the scope | 2026-11-14 |
| davaresigmavirus.github.com | Not in the scope | 2026-11-14 |
| davatron5000.github.com | Not in the scope | 2026-11-14 |
| davazp.github.com | Not in the scope | 2026-11-14 |
| dave.github.com | Not in the scope | 2026-11-14 |
| dave-and-mike.github.com | Not in the scope | 2026-11-14 |
| dave1.github.com | Not in the scope | 2026-11-14 |
| dave1010.github.com | Not in the scope | 2026-11-14 |
| davearata.github.com | Not in the scope | 2026-11-14 |
| davebridges.github.com | Not in the scope | 2026-11-14 |
| davedash.github.com | Not in the scope | 2026-11-14 |
| davefp.github.com | Not in the scope | 2026-11-14 |
| davegandy.github.com | Not in the scope | 2026-11-14 |
| davegurnell.github.com | Not in the scope | 2026-11-14 |
| davejkiger.github.com | Not in the scope | 2026-11-14 |
| davejs.github.com | Not in the scope | 2026-11-14 |
| davekinkead.github.com | Not in the scope | 2026-11-14 |
| davelab6.github.com | Not in the scope | 2026-11-14 |
| davelang.github.com | Not in the scope | 2026-11-14 |
| daveliu.github.com | Not in the scope | 2026-11-14 |
| davembush.github.com | Not in the scope | 2026-11-14 |
| lsc.davenury.github.com | Not in the scope | 2026-11-14 |
| scenarioes.lsc.davenury.github.com | Not in the scope | 2026-11-14 |
| davep.github.com | Not in the scope | 2026-11-14 |
| davepeck.github.com | Not in the scope | 2026-11-14 |
| davepoon.github.com | Not in the scope | 2026-11-14 |
| daveray.github.com | Not in the scope | 2026-11-14 |
| davereid.github.com | Not in the scope | 2026-11-14 |
| daverio.github.com | Not in the scope | 2026-11-14 |
| daveroberts.github.com | Not in the scope | 2026-11-14 |
| daverog.github.com | Not in the scope | 2026-11-14 |
| davertron.github.com | Not in the scope | 2026-11-14 |
| davesteele.github.com | Not in the scope | 2026-11-14 |
| davetayls.github.com | Not in the scope | 2026-11-14 |
| davetcode.github.com | Not in the scope | 2026-11-14 |
| davetron5000.github.com | Not in the scope | 2026-11-14 |
| davewid.github.com | Not in the scope | 2026-11-14 |
| davewilliamson.github.com | Not in the scope | 2026-11-14 |
| daveworth.github.com | Not in the scope | 2026-11-14 |
| davglass.github.com | Not in the scope | 2026-11-14 |
| david.github.com | Not in the scope | 2026-11-14 |
| david-roddy.github.com | Not in the scope | 2026-11-14 |
| david-wu.github.com | Not in the scope | 2026-11-14 |
| www.david.github.com | Not in the scope | 2026-11-14 |
| davidajulio.github.com | Not in the scope | 2026-11-14 |
| davidb.github.com | Not in the scope | 2026-11-14 |
| davidball.github.com | Not in the scope | 2026-11-14 |
| davidcaste.github.com | Not in the scope | 2026-11-14 |
| davidcelis.github.com | Not in the scope | 2026-11-14 |
| davidcelissigmavirus24.github.com | Not in the scope | 2026-11-14 |
| davidcoallier.github.com | Not in the scope | 2026-11-14 |
| davidcox.github.com | Not in the scope | 2026-11-14 |
| davidcrawford.github.com | Not in the scope | 2026-11-14 |
| daviddoran.github.com | Not in the scope | 2026-11-14 |
| davidebbo.github.com | Not in the scope | 2026-11-14 |
| davideuler.github.com | Not in the scope | 2026-11-14 |
| davidflanagan.github.com | Not in the scope | 2026-11-14 |
| davidfstr.github.com | Not in the scope | 2026-11-14 |
0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.