Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670
Vendor on CyberSIXT
Equifax (1 CVE, 0 exploited)

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.comAnalysed#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source codeAnalysed#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]Analysed#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
datajoint.github.comNot in the scope2026-11-14
datakurre.github.comNot in the scope2026-11-14
datalab.github.comNot in the scope2026-11-14
datalad-api.github.comapiNot in the scope2026-11-14
datamade.github.comNot in the scope2026-11-14
datamapper.github.comNot in the scope2026-11-14
datamaps.github.comNot in the scope2026-11-14
datamuc.github.comNot in the scope2026-11-14
datanomisch.github.comNot in the scope2026-11-14
dataorigin.github.comNot in the scope2026-11-14
datapimp.github.comNot in the scope2026-11-14
dataprev.github.comNot in the scope2026-11-14
dataprophet.github.comNot in the scope2026-11-14
datarchy.github.comNot in the scope2026-11-14
datarhei.github.comNot in the scope2026-11-14
dataservices.github.comNot in the scope2026-11-14
datasets.github.comNot in the scope2026-11-14
datasift.github.comNot in the scope2026-11-14
datastax.github.comNot in the scope2026-11-14
datasulis.github.comNot in the scope2026-11-14
datasync.github.comNot in the scope2026-11-14
datatables.github.comNot in the scope2026-11-14
datatables4j.github.comNot in the scope2026-11-14
datatheorem.github.comNot in the scope2026-11-14
datauy.github.comNot in the scope2026-11-14
dataviz.github.comNot in the scope2026-11-14
datawolf.github.comNot in the scope2026-11-14
datawraith.github.comNot in the scope2026-11-14
date.github.comNot in the scope2026-11-14
www.date.github.comNot in the scope2026-11-14
datenschutz.github.comNot in the scope2026-11-14
datil.github.comNot in the scope2026-11-14
dating.github.comNot in the scope2026-11-14
webdisk.dating.github.comNot in the scope2026-11-14
www.dating.github.comNot in the scope2026-11-14
dattaya.github.comNot in the scope2026-11-14
daugia.github.comNot in the scope2026-11-14
daum.github.comNot in the scope2026-11-14
dauphin.github.comNot in the scope2026-11-14
dauphinstop.github.comNot in the scope2026-11-14
dav.github.comNot in the scope2026-11-14
dav1dde.github.comNot in the scope2026-11-14
davare.github.comNot in the scope2026-11-14
davaresigmavirus.github.comNot in the scope2026-11-14
davatron5000.github.comNot in the scope2026-11-14
davazp.github.comNot in the scope2026-11-14
dave.github.comNot in the scope2026-11-14
dave-and-mike.github.comNot in the scope2026-11-14
dave1.github.comNot in the scope2026-11-14
dave1010.github.comNot in the scope2026-11-14
davearata.github.comNot in the scope2026-11-14
davebridges.github.comNot in the scope2026-11-14
davedash.github.comNot in the scope2026-11-14
davefp.github.comNot in the scope2026-11-14
davegandy.github.comNot in the scope2026-11-14
davegurnell.github.comNot in the scope2026-11-14
davejkiger.github.comNot in the scope2026-11-14
davejs.github.comNot in the scope2026-11-14
davekinkead.github.comNot in the scope2026-11-14
davelab6.github.comNot in the scope2026-11-14
davelang.github.comNot in the scope2026-11-14
daveliu.github.comNot in the scope2026-11-14
davembush.github.comNot in the scope2026-11-14
lsc.davenury.github.comNot in the scope2026-11-14
scenarioes.lsc.davenury.github.comNot in the scope2026-11-14
davep.github.comNot in the scope2026-11-14
davepeck.github.comNot in the scope2026-11-14
davepoon.github.comNot in the scope2026-11-14
daveray.github.comNot in the scope2026-11-14
davereid.github.comNot in the scope2026-11-14
daverio.github.comNot in the scope2026-11-14
daveroberts.github.comNot in the scope2026-11-14
daverog.github.comNot in the scope2026-11-14
davertron.github.comNot in the scope2026-11-14
davesteele.github.comNot in the scope2026-11-14
davetayls.github.comNot in the scope2026-11-14
davetcode.github.comNot in the scope2026-11-14
davetron5000.github.comNot in the scope2026-11-14
davewid.github.comNot in the scope2026-11-14
davewilliamson.github.comNot in the scope2026-11-14
daveworth.github.comNot in the scope2026-11-14
davglass.github.comNot in the scope2026-11-14
david.github.comNot in the scope2026-11-14
david-roddy.github.comNot in the scope2026-11-14
david-wu.github.comNot in the scope2026-11-14
www.david.github.comNot in the scope2026-11-14
davidajulio.github.comNot in the scope2026-11-14
davidb.github.comNot in the scope2026-11-14
davidball.github.comNot in the scope2026-11-14
davidcaste.github.comNot in the scope2026-11-14
davidcelis.github.comNot in the scope2026-11-14
davidcelissigmavirus24.github.comNot in the scope2026-11-14
davidcoallier.github.comNot in the scope2026-11-14
davidcox.github.comNot in the scope2026-11-14
davidcrawford.github.comNot in the scope2026-11-14
daviddoran.github.comNot in the scope2026-11-14
davidebbo.github.comNot in the scope2026-11-14
davideuler.github.comNot in the scope2026-11-14
davidflanagan.github.comNot in the scope2026-11-14
davidfstr.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.