Bug bounty program
EV
Equifax-vdp
Most upvoted reports7
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Important information leaked on GithubAnalysed#649322 | Authentication | 2019-08-22 | – | 98 |
| reflected XSS in [www.equifax.com]Analysed#1818163 | Cross-site Scripting | 2023-04-23 | – | 47 |
| Subdomain takeover at http://test.www.midigator.comAnalysed#1718371 | Access Control | 2022-11-12 | – | 32 |
| Open SonarQube instance leaking internal source codeAnalysed#947946 | Information Disclosure | 2020-09-03 | – | 20 |
| reflected XSS in [www.equifax.com]Analysed#1818172 | Cross-site Scripting | 2023-04-23 | – | 19 |
| Information Leak (Github)Analysed#694931 | No weakness recorded | 2020-04-09 | – | 17 |
| RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638 | Cross-site Scripting | 2022-03-09 | – | 6 |
Subdomains55,670
| Name | Scope | First seen |
|---|---|---|
| dro14.github.com | Not in the scope | 2026-11-14 |
| drogo.github.com | Not in the scope | 2026-11-14 |
| droid242.github.com | Not in the scope | 2026-11-14 |
| droidlabs.github.com | Not in the scope | 2026-11-14 |
| droneru.github.com | Not in the scope | 2026-11-14 |
| droolsjbpm.github.com | Not in the scope | 2026-11-14 |
| droot.github.com | Not in the scope | 2026-11-14 |
| drop.github.com | Not in the scope | 2026-11-14 |
| drop-covid19.github.com | Not in the scope | 2026-11-14 |
| antivirus.drop.github.com | Not in the scope | 2026-11-14 |
| covid19.drop.github.com | Not in the scope | 2026-11-14 |
| sigmavirus24.drop.github.com | Not in the scope | 2026-11-14 |
| dropbox.github.com | Not in the scope | 2026-11-14 |
| dropcovid19.github.com | Not in the scope | 2026-11-14 |
| dropecho.github.com | Not in the scope | 2026-11-14 |
| dropwizard-hikaricp.github.com | Not in the scope | 2026-11-14 |
| drorm.github.com | Not in the scope | 2026-11-14 |
| drotiro.github.com | Not in the scope | 2026-11-14 |
| drozzy.github.com | Not in the scope | 2026-11-14 |
| drp.github.com | Not in the scope | 2026-11-14 |
| drpheltright.github.com | Not in the scope | 2026-11-14 |
| drphilmarshall.github.com | Not in the scope | 2026-11-14 |
| drr00t.github.com | Not in the scope | 2026-11-14 |
| drsemann.github.com | Not in the scope | 2026-11-14 |
| drsimonmiles.github.com | Not in the scope | 2026-11-14 |
| drslump.github.com | Not in the scope | 2026-11-14 |
| drsm79.github.com | Not in the scope | 2026-11-14 |
| drsnjm.github.com | Not in the scope | 2026-11-14 |
| drtychai.github.com | Not in the scope | 2026-11-14 |
| dru.github.com | Not in the scope | 2026-11-14 |
| drublic.github.com | Not in the scope | 2026-11-14 |
| drufat.github.com | Not in the scope | 2026-11-14 |
| druide.github.com | Not in the scope | 2026-11-14 |
| drulm.github.com | Not in the scope | 2026-11-14 |
| drumandbass.github.com | Not in the scope | 2026-11-14 |
| crunchy-userinit.drummyfloyd.github.com | Not in the scope | 2026-11-14 |
| drupal.github.com | Not in the scope | 2026-11-14 |
| www.drupal.github.com | Not in the scope | 2026-11-14 |
| drupal7.github.com | Not in the scope | 2026-11-14 |
| drupalista-br.github.com | Not in the scope | 2026-11-14 |
| drupaltest.github.com | Not in the scope | 2026-11-14 |
| drupblue.github.com | Not in the scope | 2026-11-14 |
| drusk.github.com | Not in the scope | 2026-11-14 |
| drvic10k.github.com | Not in the scope | 2026-11-14 |
| drvidhya.github.com | Not in the scope | 2026-11-14 |
| drvinceknight.github.com | Not in the scope | 2026-11-14 |
| admin.drvinceknight.github.comadmin | Not in the scope | 2026-11-14 |
| autoconfig.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| autodiscover.drvinceknight.github.commail | Not in the scope | 2026-11-14 |
| beta.drvinceknight.github.comstaging | Not in the scope | 2026-11-14 |
| blog.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| cp.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| cpanel.drvinceknight.github.comadmin | Not in the scope | 2026-11-14 |
| cpanel-sigmavirus.drvinceknight.github.comadmin | Not in the scope | 2026-11-14 |
| demo.drvinceknight.github.comtest | Not in the scope | 2026-11-14 |
| dev.drvinceknight.github.comdev | Not in the scope | 2026-11-14 |
| dns1.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| dns2.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| forum.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| ftp.drvinceknight.github.comdata | Not in the scope | 2026-11-14 |
| imap.drvinceknight.github.commail | Not in the scope | 2026-11-14 |
| img.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| lists.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| localhost.drvinceknight.github.comdev | Not in the scope | 2026-11-14 |
| m.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| mail.drvinceknight.github.commail | Not in the scope | 2026-11-14 |
| mail2.drvinceknight.github.commail | Not in the scope | 2026-11-14 |
| mobile.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| mx.drvinceknight.github.commail | Not in the scope | 2026-11-14 |
| mysql.drvinceknight.github.comdata | Not in the scope | 2026-11-14 |
| new.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| news.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| ns.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| ns1.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| ns2.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| ns3.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| ns4.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| old.drvinceknight.github.comlegacy | Not in the scope | 2026-11-14 |
| pop.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| pop3.drvinceknight.github.commail | Not in the scope | 2026-11-14 |
| portal.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| secure.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| server.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| shop.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| smtp.drvinceknight.github.commail | Not in the scope | 2026-11-14 |
| static.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| support.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| test.drvinceknight.github.comtest | Not in the scope | 2026-11-14 |
| vpn.drvinceknight.github.comvpn | Not in the scope | 2026-11-14 |
| web.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| webdisk.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| webmail.drvinceknight.github.commail | Not in the scope | 2026-11-14 |
| whm.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| wiki.drvinceknight.github.comtools | Not in the scope | 2026-11-14 |
| www.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| www1.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| www2.drvinceknight.github.com | Not in the scope | 2026-11-14 |
| drweb.github.com | Not in the scope | 2026-11-14 |
| dryan.github.com | Not in the scope | 2026-11-14 |
| dryman.github.com | Not in the scope | 2026-11-14 |
0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.