Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670
Vendor on CyberSIXT
Equifax (1 CVE, 0 exploited)

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.comAnalysed#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source codeAnalysed#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]Analysed#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)Analysed#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
demo6.github.comtestNot in the scope2026-11-14
demo7.github.comtestNot in the scope2026-11-14
demo8.github.comtestNot in the scope2026-11-14
demo9.github.comtestNot in the scope2026-11-14
demobox.github.comNot in the scope2026-11-14
democovid19.github.comNot in the scope2026-11-14
democracy.github.comNot in the scope2026-11-14
democrats.github.comNot in the scope2026-11-14
demomaker.github.comNot in the scope2026-11-14
demon.github.comNot in the scope2026-11-14
demonicpagan.github.comNot in the scope2026-11-14
demos-sigmavirus.github.comNot in the scope2026-11-14
www.demos.github.comNot in the scope2026-11-14
demosdemon.github.comNot in the scope2026-11-14
demoshop.github.comNot in the scope2026-11-14
demosite.github.comNot in the scope2026-11-14
demotomohiro.github.comNot in the scope2026-11-14
demouth.github.comNot in the scope2026-11-14
dempsy.github.comNot in the scope2026-11-14
den.github.comNot in the scope2026-11-14
den0620.github.comNot in the scope2026-11-14
denadev.github.comNot in the scope2026-11-14
denalijs.github.comNot in the scope2026-11-14
deneb.github.comNot in the scope2026-11-14
denebola.github.comNot in the scope2026-11-14
deneme.github.comNot in the scope2026-11-14
denemeantivirus.github.comNot in the scope2026-11-14
denete.github.comNot in the scope2026-11-14
dengcl.github.comNot in the scope2026-11-14
denghp.github.comNot in the scope2026-11-14
dengrongguan12.github.comNot in the scope2026-11-14
dengyishuo.github.comNot in the scope2026-11-14
denhamparry.github.comNot in the scope2026-11-14
deniaz.github.comNot in the scope2026-11-14
denis.github.comNot in the scope2026-11-14
denis-bz.github.comNot in the scope2026-11-14
denis-sh.github.comNot in the scope2026-11-14
denisidoro.github.comNot in the scope2026-11-14
denisjacquemin.github.comNot in the scope2026-11-14
denismarkelov.github.comNot in the scope2026-11-14
denisneuling.github.comNot in the scope2026-11-14
dennis.github.comNot in the scope2026-11-14
dennis-antivirus.github.comNot in the scope2026-11-14
dennisg.github.comNot in the scope2026-11-14
denniskaselow.github.comNot in the scope2026-11-14
denniskubitza.github.comNot in the scope2026-11-14
denniskuczynski.github.comNot in the scope2026-11-14
dennislloydjr.github.comNot in the scope2026-11-14
dennisplucinik.github.comNot in the scope2026-11-14
dennisreimann.github.comNot in the scope2026-11-14
dennmart.github.comNot in the scope2026-11-14
denny2trasy.github.comNot in the scope2026-11-14
denodster.github.comNot in the scope2026-11-14
denominator.github.comNot in the scope2026-11-14
denormans.github.comNot in the scope2026-11-14
dental.github.comNot in the scope2026-11-14
www.dental.github.comNot in the scope2026-11-14
dential-innovation-fellows.github.comNot in the scope2026-11-14
denticons.github.comNot in the scope2026-11-14
dentist.github.comNot in the scope2026-11-14
dentistry.github.comNot in the scope2026-11-14
dentoo-lt.github.comNot in the scope2026-11-14
denver.github.comNot in the scope2026-11-14
www.denver.github.comNot in the scope2026-11-14
denysonique.github.comNot in the scope2026-11-14
denz.github.comNot in the scope2026-11-14
deok9.github.comNot in the scope2026-11-14
deou.github.comNot in the scope2026-11-14
deoxxa.github.comNot in the scope2026-11-14
dep.github.comNot in the scope2026-11-14
deplax.github.comNot in the scope2026-11-14
deploy.github.comNot in the scope2026-11-14
deploy2.github.comNot in the scope2026-11-14
deployd.github.comNot in the scope2026-11-14
depo.github.comNot in the scope2026-11-14
depoll.github.comNot in the scope2026-11-14
deportes.github.comNot in the scope2026-11-14
depot.github.comNot in the scope2026-11-14
depot1.github.comNot in the scope2026-11-14
deppbot.github.comNot in the scope2026-11-14
deprecated-on-developer.github.comlegacyNot in the scope2026-11-14
depremio.github.comNot in the scope2026-11-14
depression.github.comNot in the scope2026-11-14
deps.github.comNot in the scope2026-11-14
dept.github.comNot in the scope2026-11-14
depvery.github.comNot in the scope2026-11-14
derailed.github.comNot in the scope2026-11-14
derandreas.github.comNot in the scope2026-11-14
derby.github.comNot in the scope2026-11-14
derdesign.github.comNot in the scope2026-11-14
derdon.github.comNot in the scope2026-11-14
derecho.github.comNot in the scope2026-11-14
derefr.github.comNot in the scope2026-11-14
derek.github.comNot in the scope2026-11-14
derek0883.github.comNot in the scope2026-11-14
derekahmedzai.github.comNot in the scope2026-11-14
derekhe.github.comNot in the scope2026-11-14
derekjw.github.comNot in the scope2026-11-14
derekseverson.github.comNot in the scope2026-11-14
derektamsen.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.