Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670
Vendor on CyberSIXT
Equifax (1 CVE, 0 exploited)

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.comAnalysed#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source codeAnalysed#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]Analysed#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)Analysed#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
eliasdorneles.github.comNot in the scope2026-11-14
eliasjuanpablo.github.comNot in the scope2026-11-14
eliasnogueira.github.comNot in the scope2026-11-14
elib.github.comNot in the scope2026-11-14
elibarzilay.github.comNot in the scope2026-11-14
elibrary.github.comNot in the scope2026-11-14
elidupuis.github.comNot in the scope2026-11-14
elifesciences.github.comNot in the scope2026-11-14
elight.github.comNot in the scope2026-11-14
eligosource.github.comNot in the scope2026-11-14
elijahmanor.github.comNot in the scope2026-11-14
elindsey.github.comNot in the scope2026-11-14
eliotv.github.comNot in the scope2026-11-14
elirobinson.github.comNot in the scope2026-11-14
elis.github.comNot in the scope2026-11-14
elisa.github.comNot in the scope2026-11-14
elisaac.github.comNot in the scope2026-11-14
eliseosoto.github.comNot in the scope2026-11-14
elishacook.github.comNot in the scope2026-11-14
elishowk.github.comNot in the scope2026-11-14
elision.github.comNot in the scope2026-11-14
elite.github.comNot in the scope2026-11-14
www.elite.github.comNot in the scope2026-11-14
eliteofindia.github.comNot in the scope2026-11-14
eliteroofing.github.comNot in the scope2026-11-14
elixir-circuits.github.comNot in the scope2026-11-14
elixir-lang.github.comNot in the scope2026-11-14
elk.github.commonitoringNot in the scope2026-11-14
elklein96.github.comNot in the scope2026-11-14
elkuku.github.comNot in the scope2026-11-14
ella.github.comNot in the scope2026-11-14
elle.github.comNot in the scope2026-11-14
ellendan000.github.comNot in the scope2026-11-14
eller86.github.comNot in the scope2026-11-14
elliclee.github.comNot in the scope2026-11-14
ellie.github.comNot in the scope2026-11-14
elliothershel.github.comNot in the scope2026-11-14
elliottcable.github.comNot in the scope2026-11-14
elliottwilliams.github.comNot in the scope2026-11-14
ellisio.github.comNot in the scope2026-11-14
ellochen.github.comNot in the scope2026-11-14
ellwu.github.comNot in the scope2026-11-14
elm-city-craftworks.github.comNot in the scope2026-11-14
elma.github.comNot in the scope2026-11-14
elmarco.github.comNot in the scope2026-11-14
elmasse.github.comNot in the scope2026-11-14
elmcitylabs.github.comNot in the scope2026-11-14
elmer.github.comNot in the scope2026-11-14
elmo.github.comNot in the scope2026-11-14
elmundio87.github.comNot in the scope2026-11-14
elnino.github.comNot in the scope2026-11-14
elo.github.comNot in the scope2026-11-14
elofun.github.comNot in the scope2026-11-14
elomar.github.comNot in the scope2026-11-14
elonijamij.github.comNot in the scope2026-11-14
eloper.github.comNot in the scope2026-11-14
eloquent.github.comNot in the scope2026-11-14
elover9.github.comNot in the scope2026-11-14
elp.github.comNot in the scope2026-11-14
elpaso.github.comNot in the scope2026-11-14
elpavlillo.github.comNot in the scope2026-11-14
elpinchetopo.github.comNot in the scope2026-11-14
elrond.github.comNot in the scope2026-11-14
els.github.comNot in the scope2026-11-14
elsa.github.comNot in the scope2026-11-14
elsaleromain.github.comNot in the scope2026-11-14
elsalong.github.comNot in the scope2026-11-14
elsifaka.github.comNot in the scope2026-11-14
elstudio.github.comNot in the scope2026-11-14
eltimn.github.comNot in the scope2026-11-14
elton.github.comNot in the scope2026-11-14
elucidation.github.comNot in the scope2026-11-14
elurin.github.comNot in the scope2026-11-14
eluttner.github.comNot in the scope2026-11-14
elv1s.github.comNot in the scope2026-11-14
elving.github.comNot in the scope2026-11-14
elvis.github.comNot in the scope2026-11-14
elvis-macak.github.comNot in the scope2026-11-14
elwinlhq.github.comNot in the scope2026-11-14
elwiz.github.comNot in the scope2026-11-14
elwoodsickman.github.comNot in the scope2026-11-14
elysetison.github.comNot in the scope2026-11-14
elysium.github.comNot in the scope2026-11-14
elysium001.github.comNot in the scope2026-11-14
em.github.comNot in the scope2026-11-14
em7.github.comNot in the scope2026-11-14
emaadmanzoor.github.comNot in the scope2026-11-14
emac-utd.github.comNot in the scope2026-11-14
emachnic.github.comNot in the scope2026-11-14
emacs-grip.github.comNot in the scope2026-11-14
emacs-helm.github.comNot in the scope2026-11-14
emacs-jp.github.comNot in the scope2026-11-14
emacsclub.github.comNot in the scope2026-11-14
emacsfodder.github.comNot in the scope2026-11-14
emacsmirror.github.comNot in the scope2026-11-14
emadb.github.comNot in the scope2026-11-14
emadhegab.github.comNot in the scope2026-11-14
emagister.github.comNot in the scope2026-11-14
email.github.comNot in the scope2026-11-14
email-antivirus.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.