Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670
Vendor on CyberSIXT
Equifax (1 CVE, 0 exploited)

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.comAnalysed#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source codeAnalysed#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]Analysed#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)Analysed#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
dbbrown.github.comNot in the scope2026-11-14
dbcm.github.comNot in the scope2026-11-14
dbd.github.comNot in the scope2026-11-14
dbeard.github.comNot in the scope2026-11-14
dbellizzi.github.comNot in the scope2026-11-14
dbergey.github.comNot in the scope2026-11-14
dbfit.github.comNot in the scope2026-11-14
dbftbs.github.comNot in the scope2026-11-14
dbg-lab.github.comNot in the scope2026-11-14
dbgoodman.github.comNot in the scope2026-11-14
dbharvesthqvirus.github.comNot in the scope2026-11-14
dbian.github.comNot in the scope2026-11-14
infra-otc-cert-manager-webhook.dbildungsplattform.github.comadminNot in the scope2026-11-14
dbindel.github.comNot in the scope2026-11-14
dbinetti.github.comNot in the scope2026-11-14
dblock.github.comNot in the scope2026-11-14
dbloete.github.comNot in the scope2026-11-14
dbmdz.github.comNot in the scope2026-11-14
dbmedialab.github.comNot in the scope2026-11-14
financial-advisor.dbochman.github.comNot in the scope2026-11-14
dbolgheroni.github.comNot in the scope2026-11-14
dbourdette.github.comNot in the scope2026-11-14
dbousamra.github.comNot in the scope2026-11-14
dbouwman.github.comNot in the scope2026-11-14
dboyce.github.comNot in the scope2026-11-14
dbpedia-spotlight.github.comNot in the scope2026-11-14
dbrans.github.comNot in the scope2026-11-14
dbrock.github.comNot in the scope2026-11-14
dbs.github.comNot in the scope2026-11-14
dbs1.github.comNot in the scope2026-11-14
dbs67.github.comNot in the scope2026-11-14
dbserver.github.comNot in the scope2026-11-14
dbup.github.comNot in the scope2026-11-14
dburger.github.comNot in the scope2026-11-14
dburgos.github.comNot in the scope2026-11-14
dburkes.github.comNot in the scope2026-11-14
dbuscombe-usgs.github.comNot in the scope2026-11-14
dbushell.github.comNot in the scope2026-11-14
dbushong.github.comNot in the scope2026-11-14
dbuthay.github.comNot in the scope2026-11-14
dbwjddldb96.github.comNot in the scope2026-11-14
dc.github.comNot in the scope2026-11-14
dc-js.github.comNot in the scope2026-11-14
www.dc.github.comNot in the scope2026-11-14
dc1.github.comNot in the scope2026-11-14
dc2.github.comNot in the scope2026-11-14
dc3.github.comNot in the scope2026-11-14
dc4.github.comNot in the scope2026-11-14
dc865.github.comNot in the scope2026-11-14
dcadenas.github.comNot in the scope2026-11-14
dcarrith.github.comNot in the scope2026-11-14
dcc.github.comNot in the scope2026-11-14
dce.github.comNot in the scope2026-11-14
dcernst.github.comNot in the scope2026-11-14
dcestari.github.comNot in the scope2026-11-14
dchapkine.github.comNot in the scope2026-11-14
dcharbonnier.github.comNot in the scope2026-11-14
dchelimsky.github.comNot in the scope2026-11-14
dci.github.comNot in the scope2026-11-14
dci-in-ruby.github.comNot in the scope2026-11-14
antivirus.dci.github.comNot in the scope2026-11-14
dciarletta.github.comNot in the scope2026-11-14
dciccale.github.comNot in the scope2026-11-14
dcjones.github.comNot in the scope2026-11-14
t2oj3.dcla7.github.comNot in the scope2026-11-14
dcm.github.comNot in the scope2026-11-14
dcmi.github.comNot in the scope2026-11-14
dcms.github.comNot in the scope2026-11-14
dcobb.github.comNot in the scope2026-11-14
dcode.github.comNot in the scope2026-11-14
dcousineau.github.comNot in the scope2026-11-14
dcp.github.comNot in the scope2026-11-14
dcparker.github.comNot in the scope2026-11-14
dcposch.github.comNot in the scope2026-11-14
dcpython.github.comNot in the scope2026-11-14
dcrame31.github.comNot in the scope2026-11-14
dcramer.github.comNot in the scope2026-11-14
dcreager.github.comNot in the scope2026-11-14
dcs.github.comNot in the scope2026-11-14
dct.github.comNot in the scope2026-11-14
dcthree.github.comNot in the scope2026-11-14
dcwalker.github.comNot in the scope2026-11-14
dd.github.comNot in the scope2026-11-14
www.dd.github.comNot in the scope2026-11-14
ddc.github.comNot in the scope2026-11-14
ddd.github.comNot in the scope2026-11-14
ddellaquila.github.comNot in the scope2026-11-14
ddelony.github.comNot in the scope2026-11-14
ddemaree.github.comNot in the scope2026-11-14
ddemidov.github.comNot in the scope2026-11-14
ddgromit.github.comNot in the scope2026-11-14
ddh.github.comNot in the scope2026-11-14
ddi.github.comNot in the scope2026-11-14
ww4ju.ddkem.github.comNot in the scope2026-11-14
ddl.github.comNot in the scope2026-11-14
ddl1st.github.comNot in the scope2026-11-14
ddlsmurf.github.comNot in the scope2026-11-14
ddmnet.github.comNot in the scope2026-11-14
ddns.github.comNot in the scope2026-11-14
ddns1.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.