Bug bounty program
EV
Equifax-vdp
Most upvoted reports7
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Important information leaked on GithubAnalysed#649322 | Authentication | 2019-08-22 | – | 98 |
| reflected XSS in [www.equifax.com]Analysed#1818163 | Cross-site Scripting | 2023-04-23 | – | 47 |
| Subdomain takeover at http://test.www.midigator.comAnalysed#1718371 | Access Control | 2022-11-12 | – | 32 |
| Open SonarQube instance leaking internal source codeAnalysed#947946 | Information Disclosure | 2020-09-03 | – | 20 |
| reflected XSS in [www.equifax.com]Analysed#1818172 | Cross-site Scripting | 2023-04-23 | – | 19 |
| Information Leak (Github)Analysed#694931 | No weakness recorded | 2020-04-09 | – | 17 |
| RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638 | Cross-site Scripting | 2022-03-09 | – | 6 |
Subdomains55,670
| Name | Scope | First seen |
|---|---|---|
| cisco-uds.education.github.com | Not in the scope | 2026-11-14 |
| citrix.education.github.comvpn | Not in the scope | 2026-11-14 |
| click.education.github.com | Not in the scope | 2026-11-14 |
| cloud.education.github.com | Not in the scope | 2026-11-14 |
| code.education.github.com | Not in the scope | 2026-11-14 |
| collab.education.github.com | Not in the scope | 2026-11-14 |
| consul.education.github.comtools | Not in the scope | 2026-11-14 |
| cp.education.github.com | Not in the scope | 2026-11-14 |
| cpanel.education.github.comadmin | Not in the scope | 2026-11-14 |
| cuplogin.education.github.com | Not in the scope | 2026-11-14 |
| cveapi.education.github.com | Not in the scope | 2026-11-14 |
| db.education.github.comdata | Not in the scope | 2026-11-14 |
| dc.education.github.com | Not in the scope | 2026-11-14 |
| de.education.github.com | Not in the scope | 2026-11-14 |
| demo.education.github.comtest | Not in the scope | 2026-11-14 |
| dmarc.education.github.com | Not in the scope | 2026-11-14 |
| dns.education.github.com | Not in the scope | 2026-11-14 |
| dns1.education.github.com | Not in the scope | 2026-11-14 |
| dns2.education.github.com | Not in the scope | 2026-11-14 |
| dogfood-dev.education.github.comdev | Not in the scope | 2026-11-14 |
| dyn.education.github.com | Not in the scope | 2026-11-14 |
| elastic.education.github.comdata | Not in the scope | 2026-11-14 |
| email.education.github.com | Not in the scope | 2026-11-14 |
| exchange.education.github.commail | Not in the scope | 2026-11-14 |
| forum.education.github.com | Not in the scope | 2026-11-14 |
| forums.education.github.com | Not in the scope | 2026-11-14 |
| ftp.education.github.comdata | Not in the scope | 2026-11-14 |
| fw.education.github.com | Not in the scope | 2026-11-14 |
| ga.education.github.com | Not in the scope | 2026-11-14 |
| gac-rds-external-readonly.education.github.com | Not in the scope | 2026-11-14 |
| gac-rds-external-readonly-preprod.education.github.comstaging | Not in the scope | 2026-11-14 |
| gcom-product-find-dev.education.github.comdev | Not in the scope | 2026-11-14 |
| gcom-product-find-qa.education.github.comtest | Not in the scope | 2026-11-14 |
| git.education.github.comgit | Not in the scope | 2026-11-14 |
| gitlab.education.github.comgit | Not in the scope | 2026-11-14 |
| go.education.github.com | Not in the scope | 2026-11-14 |
| gui.education.github.com | Not in the scope | 2026-11-14 |
| gw.education.github.com | Not in the scope | 2026-11-14 |
| gws.education.github.com | Not in the scope | 2026-11-14 |
| gws-api-sandbox.education.github.comapi, test | Not in the scope | 2026-11-14 |
| gws-dev.education.github.comdev | Not in the scope | 2026-11-14 |
| gws-qa.education.github.comtest | Not in the scope | 2026-11-14 |
| gws-rds-external-readonly-uat.education.github.comtest | Not in the scope | 2026-11-14 |
| help.education.github.com | Not in the scope | 2026-11-14 |
| home.education.github.com | Not in the scope | 2026-11-14 |
| host.education.github.com | Not in the scope | 2026-11-14 |
| hostmaster.education.github.com | Not in the scope | 2026-11-14 |
| images.education.github.com | Not in the scope | 2026-11-14 |
| imap.education.github.commail | Not in the scope | 2026-11-14 |
| inbound.education.github.com | Not in the scope | 2026-11-14 |
| info.education.github.com | Not in the scope | 2026-11-14 |
| ip.education.github.com | Not in the scope | 2026-11-14 |
| job.education.github.com | Not in the scope | 2026-11-14 |
| k8s.education.github.comtools | Not in the scope | 2026-11-14 |
| knowledgemanagement.education.github.com | Not in the scope | 2026-11-14 |
| ks-inventory-api.education.github.comapi | Not in the scope | 2026-11-14 |
| ks-invoice-api.education.github.comapi | Not in the scope | 2026-11-14 |
| ks-limits-api.education.github.comapi | Not in the scope | 2026-11-14 |
| ks-order-api.education.github.comapi | Not in the scope | 2026-11-14 |
| ks-program-api.education.github.comapi | Not in the scope | 2026-11-14 |
| ks-vendingtransactions-mq1.education.github.com | Not in the scope | 2026-11-14 |
| ks-vendingtransactions-mq2.education.github.com | Not in the scope | 2026-11-14 |
| ks-vendingtransactions-mq3.education.github.com | Not in the scope | 2026-11-14 |
| kubernetes.education.github.comtools | Not in the scope | 2026-11-14 |
| lists.education.github.com | Not in the scope | 2026-11-14 |
| localhost.education.github.comdev | Not in the scope | 2026-11-14 |
| m.education.github.com | Not in the scope | 2026-11-14 |
| mail.education.github.commail | Not in the scope | 2026-11-14 |
| mail2.education.github.commail | Not in the scope | 2026-11-14 |
| mailserver.education.github.com | Not in the scope | 2026-11-14 |
| mdm.education.github.com | Not in the scope | 2026-11-14 |
| merchandising-preview.education.github.comstaging | Not in the scope | 2026-11-14 |
| metrics.education.github.commonitoring | Not in the scope | 2026-11-14 |
| ml.education.github.com | Not in the scope | 2026-11-14 |
| mobile-rest.education.github.com | Not in the scope | 2026-11-14 |
| mongo.education.github.comdata | Not in the scope | 2026-11-14 |
| mssql.education.github.com | Not in the scope | 2026-11-14 |
| mta-sts.education.github.com | Not in the scope | 2026-11-14 |
| mx.education.github.commail | Not in the scope | 2026-11-14 |
| mx01.education.github.com | Not in the scope | 2026-11-14 |
| mx1.education.github.com | Not in the scope | 2026-11-14 |
| mysql.education.github.comdata | Not in the scope | 2026-11-14 |
| new.education.github.com | Not in the scope | 2026-11-14 |
| news.education.github.com | Not in the scope | 2026-11-14 |
| nginx.education.github.com | Not in the scope | 2026-11-14 |
| nginx-newest.education.github.com | Not in the scope | 2026-11-14 |
| nodejs.education.github.com | Not in the scope | 2026-11-14 |
| nodejs-dev.education.github.comdev | Not in the scope | 2026-11-14 |
| non-prod.education.github.com | Not in the scope | 2026-11-14 |
| ns.education.github.com | Not in the scope | 2026-11-14 |
| ns1.education.github.com | Not in the scope | 2026-11-14 |
| ns2.education.github.com | Not in the scope | 2026-11-14 |
| ns3.education.github.com | Not in the scope | 2026-11-14 |
| ns4.education.github.com | Not in the scope | 2026-11-14 |
| outlook.education.github.com | Not in the scope | 2026-11-14 |
| pop.education.github.com | Not in the scope | 2026-11-14 |
| portal.education.github.com | Not in the scope | 2026-11-14 |
| postmaster.education.github.com | Not in the scope | 2026-11-14 |
| pre.education.github.com | Not in the scope | 2026-11-14 |
| pre-prod.education.github.com | Not in the scope | 2026-11-14 |
0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.