Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670
Vendor on CyberSIXT
Equifax (1 CVE, 0 exploited)

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.comAnalysed#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source codeAnalysed#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]Analysed#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)Analysed#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
dhrubajyoti-das.github.comNot in the scope2026-11-14
dhs.github.comNot in the scope2026-11-14
dhtml.github.comNot in the scope2026-11-14
dhtmlx.github.comNot in the scope2026-11-14
di.github.comNot in the scope2026-11-14
dia.github.comNot in the scope2026-11-14
diablo.github.comNot in the scope2026-11-14
diablogate.github.comNot in the scope2026-11-14
diabolo.github.comNot in the scope2026-11-14
diafygi.github.comNot in the scope2026-11-14
diagramatics.github.comNot in the scope2026-11-14
diagvirus.github.comNot in the scope2026-11-14
dial.github.comNot in the scope2026-11-14
dialer.github.comNot in the scope2026-11-14
dialin.github.comNot in the scope2026-11-14
dialog.github.comNot in the scope2026-11-14
dialup.github.comNot in the scope2026-11-14
diamant.github.comNot in the scope2026-11-14
diamante.github.comNot in the scope2026-11-14
diamond.github.comNot in the scope2026-11-14
diana.github.comNot in the scope2026-11-14
dianaliu.github.comNot in the scope2026-11-14
dianarg.github.comNot in the scope2026-11-14
diane.github.comNot in the scope2026-11-14
dianping.github.comNot in the scope2026-11-14
dianthudia.github.comNot in the scope2026-11-14
diary.github.comNot in the scope2026-11-14
diasjorge.github.comNot in the scope2026-11-14
diaspora.github.comNot in the scope2026-11-14
diasporagames.github.comNot in the scope2026-11-14
dibog.github.comNot in the scope2026-11-14
dic.github.comNot in the scope2026-11-14
dice.github.comNot in the scope2026-11-14
dickeytk.github.comNot in the scope2026-11-14
dickhardt.github.comNot in the scope2026-11-14
dickson.github.comNot in the scope2026-11-14
dickwall.github.comNot in the scope2026-11-14
dicook.github.comNot in the scope2026-11-14
dict.github.comNot in the scope2026-11-14
dicta.github.comNot in the scope2026-11-14
dictav.github.comNot in the scope2026-11-14
dictionary.github.comNot in the scope2026-11-14
www.dictionary.github.comNot in the scope2026-11-14
dictybase.github.comNot in the scope2026-11-14
didan.github.comNot in the scope2026-11-14
diddy.github.comNot in the scope2026-11-14
dideler.github.comNot in the scope2026-11-14
didi.github.comNot in the scope2026-11-14
didit-tech.github.comNot in the scope2026-11-14
didlix.github.comNot in the scope2026-11-14
didnotread.github.comNot in the scope2026-11-14
diego.github.comNot in the scope2026-11-14
diego95root.github.comNot in the scope2026-11-14
diegoajv.github.comNot in the scope2026-11-14
diegofrata.github.comNot in the scope2026-11-14
diegoholiveira.github.comNot in the scope2026-11-14
diegok.github.comNot in the scope2026-11-14
diegotres.github.comNot in the scope2026-11-14
diegozurita.github.comNot in the scope2026-11-14
diemthi.github.comNot in the scope2026-11-14
diendan.github.comNot in the scope2026-11-14
dieperid.github.comNot in the scope2026-11-14
dieschwarzekobra.github.comNot in the scope2026-11-14
diesel.github.comNot in the scope2026-11-14
diet.github.comNot in the scope2026-11-14
dieta.github.comNot in the scope2026-11-14
dietcake.github.comNot in the scope2026-11-14
dietrichf.github.comNot in the scope2026-11-14
dieu.github.comNot in the scope2026-11-14
diexel64.github.comNot in the scope2026-11-14
diff-to-api.github.comapiNot in the scope2026-11-14
differential.github.comNot in the scope2026-11-14
diffroot.github.comNot in the scope2026-11-14
diffsky.github.comNot in the scope2026-11-14
diffusion.github.comNot in the scope2026-11-14
digdog.github.comNot in the scope2026-11-14
digg.github.comNot in the scope2026-11-14
diggin.github.comNot in the scope2026-11-14
digi.github.comNot in the scope2026-11-14
www.digi.github.comNot in the scope2026-11-14
digibandit-it-services.github.comNot in the scope2026-11-14
digidem.github.comNot in the scope2026-11-14
digiex.github.comNot in the scope2026-11-14
digihex.github.comNot in the scope2026-11-14
digilib.github.comNot in the scope2026-11-14
digilive.github.comNot in the scope2026-11-14
digimon1740.github.comNot in the scope2026-11-14
digisys.github.comNot in the scope2026-11-14
digit.github.comNot in the scope2026-11-14
digital.github.comNot in the scope2026-11-14
digital-preservation.github.comNot in the scope2026-11-14
www.digital.github.comNot in the scope2026-11-14
digitalbodyguard.github.comNot in the scope2026-11-14
digitalbutter.github.comNot in the scope2026-11-14
digitaljhelms.github.comNot in the scope2026-11-14
digitalkaoz.github.comNot in the scope2026-11-14
digitalmedia.github.comNot in the scope2026-11-14
digitalmint.github.comNot in the scope2026-11-14
digitaloxford.github.comNot in the scope2026-11-14
digitalprog.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.