Bug bounty program
EV
Equifax-vdp
Most upvoted reports7
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Important information leaked on GithubAnalysed#649322 | Authentication | 2019-08-22 | – | 98 |
| reflected XSS in [www.equifax.com]Analysed#1818163 | Cross-site Scripting | 2023-04-23 | – | 47 |
| Subdomain takeover at http://test.www.midigator.comAnalysed#1718371 | Access Control | 2022-11-12 | – | 32 |
| Open SonarQube instance leaking internal source codeAnalysed#947946 | Information Disclosure | 2020-09-03 | – | 20 |
| reflected XSS in [www.equifax.com]Analysed#1818172 | Cross-site Scripting | 2023-04-23 | – | 19 |
| Information Leak (Github)Analysed#694931 | No weakness recorded | 2020-04-09 | – | 17 |
| RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638 | Cross-site Scripting | 2022-03-09 | – | 6 |
Subdomains55,670
| Name | Scope | First seen |
|---|---|---|
| digitsecurity.github.com | Not in the scope | 2026-11-14 |
| dignati.github.com | Not in the scope | 2026-11-14 |
| dila813.github.com | Not in the scope | 2026-11-14 |
| dilborg.github.com | Not in the scope | 2026-11-14 |
| dill.github.com | Not in the scope | 2026-11-14 |
| dillon-sellars.github.com | Not in the scope | 2026-11-14 |
| dima.github.com | Not in the scope | 2026-11-14 |
| dima767.github.com | Not in the scope | 2026-11-14 |
| dimalev.github.com | Not in the scope | 2026-11-14 |
| dimanech.github.com | Not in the scope | 2026-11-14 |
| dimelo.github.com | Not in the scope | 2026-11-14 |
| dimensia.github.com | Not in the scope | 2026-11-14 |
| dimichspb.github.com | Not in the scope | 2026-11-14 |
| dimik.github.com | Not in the scope | 2026-11-14 |
| dimitar-asenov.github.com | Not in the scope | 2026-11-14 |
| dimitarchristoff.github.com | Not in the scope | 2026-11-14 |
| dimitrisjim.github.com | Not in the scope | 2026-11-14 |
| dimitrismistriotis.github.com | Not in the scope | 2026-11-14 |
| dimitry.github.com | Not in the scope | 2026-11-14 |
| dimme.github.com | Not in the scope | 2026-11-14 |
| dimous.github.com | Not in the scope | 2026-11-14 |
| dimroc.github.com | Not in the scope | 2026-11-14 |
| dimtemp.github.com | Not in the scope | 2026-11-14 |
| dinduks.github.com | Not in the scope | 2026-11-14 |
| dineshkummarc.github.com | Not in the scope | 2026-11-14 |
| ding.github.com | Not in the scope | 2026-11-14 |
| dingbat.github.com | Not in the scope | 2026-11-14 |
| dingdong.github.com | Not in the scope | 2026-11-14 |
| dingk-r.github.com | Not in the scope | 2026-11-14 |
| dingmaotu.github.com | Not in the scope | 2026-11-14 |
| dingo.github.com | Not in the scope | 2026-11-14 |
| dingorio.github.com | Not in the scope | 2026-11-14 |
| dinhnguyen.github.com | Not in the scope | 2026-11-14 |
| dinkel.github.com | Not in the scope | 2026-11-14 |
| dino.github.com | Not in the scope | 2026-11-14 |
| dinoboff.github.com | Not in the scope | 2026-11-14 |
| dinomite.github.com | Not in the scope | 2026-11-14 |
| dinopetrone.github.com | Not in the scope | 2026-11-14 |
| dinosaur.github.com | Not in the scope | 2026-11-14 |
| dio.github.com | Not in the scope | 2026-11-14 |
| diogo149.github.com | Not in the scope | 2026-11-14 |
| diogob.github.com | Not in the scope | 2026-11-14 |
| diogogmt.github.com | Not in the scope | 2026-11-14 |
| diogomafra.github.com | Not in the scope | 2026-11-14 |
| dioh.github.com | Not in the scope | 2026-11-14 |
| dione.github.com | Not in the scope | 2026-11-14 |
| dionysos.github.com | Not in the scope | 2026-11-14 |
| dionysus.github.com | Not in the scope | 2026-11-14 |
| dippa.github.com | Not in the scope | 2026-11-14 |
| dipsy.github.com | Not in the scope | 2026-11-14 |
| dipu-bd.github.com | Not in the scope | 2026-11-14 |
| dir.github.com | Not in the scope | 2026-11-14 |
| www.dir.github.com | Not in the scope | 2026-11-14 |
| dira.github.com | Not in the scope | 2026-11-14 |
| dirac.github.com | Not in the scope | 2026-11-14 |
| dircircuit.github.com | Not in the scope | 2026-11-14 |
| direct.github.com | Not in the scope | 2026-11-14 |
| direct-api.github.comapi | Not in the scope | 2026-11-14 |
| direct-fuel-injection.github.com | Not in the scope | 2026-11-14 |
| direct-to-api.github.comapi | Not in the scope | 2026-11-14 |
| direct-to-encapsulated-https-api.github.comapi | Not in the scope | 2026-11-14 |
| direct-to-encapsulated-ssh-ssh.github.com | Not in the scope | 2026-11-14 |
| director.github.com | Not in the scope | 2026-11-14 |
| autoconfig.director.github.com | Not in the scope | 2026-11-14 |
| autodiscover.director.github.commail | Not in the scope | 2026-11-14 |
| webdisk.director.github.com | Not in the scope | 2026-11-14 |
| directories.github.com | Not in the scope | 2026-11-14 |
| directorio.github.com | Not in the scope | 2026-11-14 |
| www.directorio.github.com | Not in the scope | 2026-11-14 |
| directory.github.com | Not in the scope | 2026-11-14 |
| autoconfig.directory.github.com | Not in the scope | 2026-11-14 |
| autodiscover.directory.github.commail | Not in the scope | 2026-11-14 |
| webdisk.directory.github.com | Not in the scope | 2026-11-14 |
| www.directory.github.com | Not in the scope | 2026-11-14 |
| directoutput.github.com | Not in the scope | 2026-11-14 |
| diretto.github.com | Not in the scope | 2026-11-14 |
| dirkaholic.github.com | Not in the scope | 2026-11-14 |
| dirkbajdas.github.com | Not in the scope | 2026-11-14 |
| dirkcuys.github.com | Not in the scope | 2026-11-14 |
| dirkk0.github.com | Not in the scope | 2026-11-14 |
| dirkx.github.com | Not in the scope | 2026-11-14 |
| dirtyequi.github.com | Not in the scope | 2026-11-14 |
| dirtysalt.github.com | Not in the scope | 2026-11-14 |
| dis.github.com | Not in the scope | 2026-11-14 |
| disabled.github.com | Not in the scope | 2026-11-14 |
| disburden.github.com | Not in the scope | 2026-11-14 |
| disclojure.github.com | Not in the scope | 2026-11-14 |
| disco.github.com | Not in the scope | 2026-11-14 |
| discord.github.com | Not in the scope | 2026-11-14 |
| discount.github.com | Not in the scope | 2026-11-14 |
| discountfinder.github.com | Not in the scope | 2026-11-14 |
| discover.github.com | Not in the scope | 2026-11-14 |
| discovere.github.com | Not in the scope | 2026-11-14 |
| discovery.github.com | Not in the scope | 2026-11-14 |
| www.discovery.github.com | Not in the scope | 2026-11-14 |
| discretelogics.github.com | Not in the scope | 2026-11-14 |
| discus.github.com | Not in the scope | 2026-11-14 |
| discuss.github.com | Not in the scope | 2026-11-14 |
| discussion.github.com | Not in the scope | 2026-11-14 |
| discussions.github.com | Not in the scope | 2026-11-14 |
0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.