Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670
Vendor on CyberSIXT
Equifax (1 CVE, 0 exploited)

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.comAnalysed#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source codeAnalysed#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]Analysed#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)Analysed#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
cisco-uds.education.github.comNot in the scope2026-11-14
citrix.education.github.comvpnNot in the scope2026-11-14
click.education.github.comNot in the scope2026-11-14
cloud.education.github.comNot in the scope2026-11-14
code.education.github.comNot in the scope2026-11-14
collab.education.github.comNot in the scope2026-11-14
consul.education.github.comtoolsNot in the scope2026-11-14
cp.education.github.comNot in the scope2026-11-14
cpanel.education.github.comadminNot in the scope2026-11-14
cuplogin.education.github.comNot in the scope2026-11-14
cveapi.education.github.comNot in the scope2026-11-14
db.education.github.comdataNot in the scope2026-11-14
dc.education.github.comNot in the scope2026-11-14
de.education.github.comNot in the scope2026-11-14
demo.education.github.comtestNot in the scope2026-11-14
dmarc.education.github.comNot in the scope2026-11-14
dns.education.github.comNot in the scope2026-11-14
dns1.education.github.comNot in the scope2026-11-14
dns2.education.github.comNot in the scope2026-11-14
dogfood-dev.education.github.comdevNot in the scope2026-11-14
dyn.education.github.comNot in the scope2026-11-14
elastic.education.github.comdataNot in the scope2026-11-14
email.education.github.comNot in the scope2026-11-14
exchange.education.github.commailNot in the scope2026-11-14
forum.education.github.comNot in the scope2026-11-14
forums.education.github.comNot in the scope2026-11-14
ftp.education.github.comdataNot in the scope2026-11-14
fw.education.github.comNot in the scope2026-11-14
ga.education.github.comNot in the scope2026-11-14
gac-rds-external-readonly.education.github.comNot in the scope2026-11-14
gac-rds-external-readonly-preprod.education.github.comstagingNot in the scope2026-11-14
gcom-product-find-dev.education.github.comdevNot in the scope2026-11-14
gcom-product-find-qa.education.github.comtestNot in the scope2026-11-14
git.education.github.comgitNot in the scope2026-11-14
gitlab.education.github.comgitNot in the scope2026-11-14
go.education.github.comNot in the scope2026-11-14
gui.education.github.comNot in the scope2026-11-14
gw.education.github.comNot in the scope2026-11-14
gws.education.github.comNot in the scope2026-11-14
gws-api-sandbox.education.github.comapi, testNot in the scope2026-11-14
gws-dev.education.github.comdevNot in the scope2026-11-14
gws-qa.education.github.comtestNot in the scope2026-11-14
gws-rds-external-readonly-uat.education.github.comtestNot in the scope2026-11-14
help.education.github.comNot in the scope2026-11-14
home.education.github.comNot in the scope2026-11-14
host.education.github.comNot in the scope2026-11-14
hostmaster.education.github.comNot in the scope2026-11-14
images.education.github.comNot in the scope2026-11-14
imap.education.github.commailNot in the scope2026-11-14
inbound.education.github.comNot in the scope2026-11-14
info.education.github.comNot in the scope2026-11-14
ip.education.github.comNot in the scope2026-11-14
job.education.github.comNot in the scope2026-11-14
k8s.education.github.comtoolsNot in the scope2026-11-14
knowledgemanagement.education.github.comNot in the scope2026-11-14
ks-inventory-api.education.github.comapiNot in the scope2026-11-14
ks-invoice-api.education.github.comapiNot in the scope2026-11-14
ks-limits-api.education.github.comapiNot in the scope2026-11-14
ks-order-api.education.github.comapiNot in the scope2026-11-14
ks-program-api.education.github.comapiNot in the scope2026-11-14
ks-vendingtransactions-mq1.education.github.comNot in the scope2026-11-14
ks-vendingtransactions-mq2.education.github.comNot in the scope2026-11-14
ks-vendingtransactions-mq3.education.github.comNot in the scope2026-11-14
kubernetes.education.github.comtoolsNot in the scope2026-11-14
lists.education.github.comNot in the scope2026-11-14
localhost.education.github.comdevNot in the scope2026-11-14
m.education.github.comNot in the scope2026-11-14
mail.education.github.commailNot in the scope2026-11-14
mail2.education.github.commailNot in the scope2026-11-14
mailserver.education.github.comNot in the scope2026-11-14
mdm.education.github.comNot in the scope2026-11-14
merchandising-preview.education.github.comstagingNot in the scope2026-11-14
metrics.education.github.commonitoringNot in the scope2026-11-14
ml.education.github.comNot in the scope2026-11-14
mobile-rest.education.github.comNot in the scope2026-11-14
mongo.education.github.comdataNot in the scope2026-11-14
mssql.education.github.comNot in the scope2026-11-14
mta-sts.education.github.comNot in the scope2026-11-14
mx.education.github.commailNot in the scope2026-11-14
mx01.education.github.comNot in the scope2026-11-14
mx1.education.github.comNot in the scope2026-11-14
mysql.education.github.comdataNot in the scope2026-11-14
new.education.github.comNot in the scope2026-11-14
news.education.github.comNot in the scope2026-11-14
nginx.education.github.comNot in the scope2026-11-14
nginx-newest.education.github.comNot in the scope2026-11-14
nodejs.education.github.comNot in the scope2026-11-14
nodejs-dev.education.github.comdevNot in the scope2026-11-14
non-prod.education.github.comNot in the scope2026-11-14
ns.education.github.comNot in the scope2026-11-14
ns1.education.github.comNot in the scope2026-11-14
ns2.education.github.comNot in the scope2026-11-14
ns3.education.github.comNot in the scope2026-11-14
ns4.education.github.comNot in the scope2026-11-14
outlook.education.github.comNot in the scope2026-11-14
pop.education.github.comNot in the scope2026-11-14
portal.education.github.comNot in the scope2026-11-14
postmaster.education.github.comNot in the scope2026-11-14
pre.education.github.comNot in the scope2026-11-14
pre-prod.education.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.