Bug bounty program
EV
Equifax-vdp
Most upvoted reports7
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Important information leaked on GithubAnalysed#649322 | Authentication | 2019-08-22 | – | 98 |
| reflected XSS in [www.equifax.com]#1818163 | Cross-site Scripting | 2023-04-23 | – | 47 |
| Subdomain takeover at http://test.www.midigator.com#1718371 | Access Control | 2022-11-12 | – | 32 |
| Open SonarQube instance leaking internal source code#947946 | Information Disclosure | 2020-09-03 | – | 20 |
| reflected XSS in [www.equifax.com]#1818172 | Cross-site Scripting | 2023-04-23 | – | 19 |
| Information Leak (Github)#694931 | No weakness recorded | 2020-04-09 | – | 17 |
| RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638 | Cross-site Scripting | 2022-03-09 | – | 6 |
Subdomains55,670
| Name | Scope | First seen |
|---|---|---|
| advancement.github.com | Not in the scope | 2026-11-14 |
| advany.github.com | Not in the scope | 2026-11-14 |
| advert.github.com | Not in the scope | 2026-11-14 |
| advertise.github.com | Not in the scope | 2026-11-14 |
| advertisement.github.com | Not in the scope | 2026-11-14 |
| advertiser.github.com | Not in the scope | 2026-11-14 |
| advertisers.github.com | Not in the scope | 2026-11-14 |
| advertising.github.com | Not in the scope | 2026-11-14 |
| www.advertising.github.com | Not in the scope | 2026-11-14 |
| advice.github.com | Not in the scope | 2026-11-14 |
| advisor.github.com | Not in the scope | 2026-11-14 |
| advisory-rankings.github.com | Not in the scope | 2026-11-14 |
| advocate.github.com | Not in the scope | 2026-11-14 |
| advokat.github.com | Not in the scope | 2026-11-14 |
| advsec.github.com | Not in the scope | 2026-11-14 |
| adw0rd.github.com | Not in the scope | 2026-11-14 |
| adwords.github.com | Not in the scope | 2026-11-14 |
| adx.github.com | Not in the scope | 2026-11-14 |
| adyax.github.com | Not in the scope | 2026-11-14 |
| adyg.github.com | Not in the scope | 2026-11-14 |
| adymitruk.github.com | Not in the scope | 2026-11-14 |
| ae.github.com | Not in the scope | 2026-11-14 |
| types-openapi-github.ae-diff-to-api.github.comapi, git | Not in the scope | 2026-11-14 |
| redis1.ae.github.comdata | Not in the scope | 2026-11-14 |
| www.ae.github.com | Not in the scope | 2026-11-14 |
| ae654853.github.com | Not in the scope | 2026-11-14 |
| aearly.github.com | Not in the scope | 2026-11-14 |
| aebruno.github.com | Not in the scope | 2026-11-14 |
| aebsr.github.com | Not in the scope | 2026-11-14 |
| aeden.github.com | Not in the scope | 2026-11-14 |
| aegony.github.com | Not in the scope | 2026-11-14 |
| aehlke.github.com | Not in the scope | 2026-11-14 |
| aehmlo.github.com | Not in the scope | 2026-11-14 |
| aeisenberg.github.com | Not in the scope | 2026-11-14 |
| aelam.github.com | Not in the scope | 2026-11-14 |
| aelliott.github.com | Not in the scope | 2026-11-14 |
| aelse.github.com | Not in the scope | 2026-11-14 |
| aemkei.github.com | Not in the scope | 2026-11-14 |
| aemoncannon.github.com | Not in the scope | 2026-11-14 |
| aeolianine.github.com | Not in the scope | 2026-11-14 |
| aeolusproject.github.com | Not in the scope | 2026-11-14 |
| aeon.github.com | Not in the scope | 2026-11-14 |
| aeosynth.github.com | Not in the scope | 2026-11-14 |
| aerdogan.github.com | Not in the scope | 2026-11-14 |
| aereal.github.com | Not in the scope | 2026-11-14 |
| aerkalov.github.com | Not in the scope | 2026-11-14 |
| aero.github.com | Not in the scope | 2026-11-14 |
| aerogear.github.com | Not in the scope | 2026-11-14 |
| aerokube.github.com | Not in the scope | 2026-11-14 |
| aeroneering.github.com | Not in the scope | 2026-11-14 |
| aeropig-aeropig.github.com | Not in the scope | 2026-11-14 |
| aerosol.github.com | Not in the scope | 2026-11-14 |
| aery32.github.com | Not in the scope | 2026-11-14 |
| aeschright.github.com | Not in the scope | 2026-11-14 |
| aeshell.github.com | Not in the scope | 2026-11-14 |
| aeslaughter.github.com | Not in the scope | 2026-11-14 |
| aesptux.github.com | Not in the scope | 2026-11-14 |
| aeternam.github.com | Not in the scope | 2026-11-14 |
| aetherworks.github.com | Not in the scope | 2026-11-14 |
| aevum.github.com | Not in the scope | 2026-11-14 |
| aewallin.github.com | Not in the scope | 2026-11-14 |
| aextatic.github.com | Not in the scope | 2026-11-14 |
| af.github.com | Not in the scope | 2026-11-14 |
| af-af.github.com | Not in the scope | 2026-11-14 |
| af83.github.com | Not in the scope | 2026-11-14 |
| www.afaceri.github.com | Not in the scope | 2026-11-14 |
| afaceurlb0z.github.com | Not in the scope | 2026-11-14 |
| afarkas.github.com | Not in the scope | 2026-11-14 |
| afassoftware.github.com | Not in the scope | 2026-11-14 |
| afeinberg.github.com | Not in the scope | 2026-11-14 |
| afeld.github.com | Not in the scope | 2026-11-14 |
| aff.github.com | Not in the scope | 2026-11-14 |
| www.aff.github.com | Not in the scope | 2026-11-14 |
| affiliate.github.com | Not in the scope | 2026-11-14 |
| www.affiliate.github.com | Not in the scope | 2026-11-14 |
| affiliates.github.com | Not in the scope | 2026-11-14 |
| www.affiliates.github.com | Not in the scope | 2026-11-14 |
| affinityclick.github.com | Not in the scope | 2026-11-14 |
| afgeneralist.github.com | Not in the scope | 2026-11-14 |
| afiannac2.github.com | Not in the scope | 2026-11-14 |
| www.afisha.github.com | Not in the scope | 2026-11-14 |
| afm.github.com | Not in the scope | 2026-11-14 |
| afmayer.github.com | Not in the scope | 2026-11-14 |
| afnetworking.github.com | Not in the scope | 2026-11-14 |
| afohotilajov.github.com | Not in the scope | 2026-11-14 |
| afoozle.github.com | Not in the scope | 2026-11-14 |
| afp.github.com | Not in the scope | 2026-11-14 |
| afranceschetti.github.com | Not in the scope | 2026-11-14 |
| afreizeiten.github.com | Not in the scope | 2026-11-14 |
| africa.github.com | Not in the scope | 2026-11-14 |
| afriggeri.github.com | Not in the scope | 2026-11-14 |
| afrodita.github.com | Not in the scope | 2026-11-14 |
| afs.github.com | Not in the scope | 2026-11-14 |
| afshin.github.com | Not in the scope | 2026-11-14 |
| afshinm.github.com | Not in the scope | 2026-11-14 |
| after12am.github.com | Not in the scope | 2026-11-14 |
| afterlight.github.com | Not in the scope | 2026-11-14 |
| afulilat.github.com | Not in the scope | 2026-11-14 |
| ag.github.com | Not in the scope | 2026-11-14 |
| gw.ag.github.com | Not in the scope | 2026-11-14 |
0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.