Bug bounty program
EV
Equifax-vdp
Most upvoted reports7
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Important information leaked on GithubAnalysed#649322 | Authentication | 2019-08-22 | – | 98 |
| reflected XSS in [www.equifax.com]Analysed#1818163 | Cross-site Scripting | 2023-04-23 | – | 47 |
| Subdomain takeover at http://test.www.midigator.com#1718371 | Access Control | 2022-11-12 | – | 32 |
| Open SonarQube instance leaking internal source code#947946 | Information Disclosure | 2020-09-03 | – | 20 |
| reflected XSS in [www.equifax.com]#1818172 | Cross-site Scripting | 2023-04-23 | – | 19 |
| Information Leak (Github)#694931 | No weakness recorded | 2020-04-09 | – | 17 |
| RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638 | Cross-site Scripting | 2022-03-09 | – | 6 |
Subdomains55,670
| Name | Scope | First seen |
|---|---|---|
| aulavirtual.github.com | Not in the scope | 2026-11-14 |
| aullman.github.com | Not in the scope | 2026-11-14 |
| aumkar.github.com | Not in the scope | 2026-11-14 |
| aupajo.github.com | Not in the scope | 2026-11-14 |
| aura.github.com | Not in the scope | 2026-11-14 |
| auragan.github.com | Not in the scope | 2026-11-14 |
| aurajs.github.com | Not in the scope | 2026-11-14 |
| auraphp.github.com | Not in the scope | 2026-11-14 |
| aurbano.github.com | Not in the scope | 2026-11-14 |
| aurelia.github.com | Not in the scope | 2026-11-14 |
| aurelien-defossez.github.com | Not in the scope | 2026-11-14 |
| aurelien-naldi.github.com | Not in the scope | 2026-11-14 |
| auriga.github.com | Not in the scope | 2026-11-14 |
| aurimasv.github.com | Not in the scope | 2026-11-14 |
| aurora.github.com | Not in the scope | 2026-11-14 |
| aurora-something.github.com | Not in the scope | 2026-11-14 |
| www.aurora.github.com | Not in the scope | 2026-11-14 |
| aurora1625.github.com | Not in the scope | 2026-11-14 |
| auroua.github.com | Not in the scope | 2026-11-14 |
| auser.github.com | Not in the scope | 2026-11-14 |
| ausesa.github.com | Not in the scope | 2026-11-14 |
| ausi.github.com | Not in the scope | 2026-11-14 |
| ausregistry.github.com | Not in the scope | 2026-11-14 |
| aussie.github.com | Not in the scope | 2026-11-14 |
| aussielunix.github.com | Not in the scope | 2026-11-14 |
| aussiematt95.github.com | Not in the scope | 2026-11-14 |
| austin.github.com | Not in the scope | 2026-11-14 |
| austin-rb.github.com | Not in the scope | 2026-11-14 |
| austinb.github.com | Not in the scope | 2026-11-14 |
| austinbergstrom.github.com | Not in the scope | 2026-11-14 |
| austingreco.github.com | Not in the scope | 2026-11-14 |
| austinhuang0131.github.com | Not in the scope | 2026-11-14 |
| austinmh.github.com | Not in the scope | 2026-11-14 |
| austinycn.github.com | Not in the scope | 2026-11-14 |
| australia.github.com | Not in the scope | 2026-11-14 |
| www.australia.github.com | Not in the scope | 2026-11-14 |
| austria.github.com | Not in the scope | 2026-11-14 |
| aut0poietic.github.com | Not in the scope | 2026-11-14 |
| auta.github.com | Not in the scope | 2026-11-14 |
| autarchprinceps.github.com | Not in the scope | 2026-11-14 |
| autch.github.com | Not in the scope | 2026-11-14 |
| autermann.github.com | Not in the scope | 2026-11-14 |
| auth.github.comauth | Not in the scope | 2026-11-14 |
| auth-hack.github.comauth | Not in the scope | 2026-11-14 |
| git.auth.github.comauth, git | Not in the scope | 2026-11-14 |
| radius.auth.github.comauth | Not in the scope | 2026-11-14 |
| auth0.github.comauth | Not in the scope | 2026-11-14 |
| auth1.github.comauth | Not in the scope | 2026-11-14 |
| auth10.github.comauth | Not in the scope | 2026-11-14 |
| auth2.github.comauth | Not in the scope | 2026-11-14 |
| auth3.github.comauth | Not in the scope | 2026-11-14 |
| authedhost.github.com | Not in the scope | 2026-11-14 |
| authentic-rising.github.com | Not in the scope | 2026-11-14 |
| author.github.com | Not in the scope | 2026-11-14 |
| www.author.github.com | Not in the scope | 2026-11-14 |
| authors.github.com | Not in the scope | 2026-11-14 |
| authy.github.com | Not in the scope | 2026-11-14 |
| autio.github.com | Not in the scope | 2026-11-14 |
| auto.github.com | Not in the scope | 2026-11-14 |
| auto-complete.github.com | Not in the scope | 2026-11-14 |
| auto-rescue-solutions.github.com | Not in the scope | 2026-11-14 |
| www.auto.github.com | Not in the scope | 2026-11-14 |
| autoalan.github.com | Not in the scope | 2026-11-14 |
| autocad.github.com | Not in the scope | 2026-11-14 |
| autocondat.github.com | Not in the scope | 2026-11-14 |
| autoconfig.github.com | Not in the scope | 2026-11-14 |
| autodereify.github.com | Not in the scope | 2026-11-14 |
| autodiscover.github.commail | Not in the scope | 2026-11-14 |
| autodiscover-redirect.github.commail | Not in the scope | 2026-11-14 |
| automail.github.com | Not in the scope | 2026-11-14 |
| automata.github.com | Not in the scope | 2026-11-14 |
| automatedlabs.github.com | Not in the scope | 2026-11-14 |
| automatedtester.github.com | Not in the scope | 2026-11-14 |
| automation.github.com | Not in the scope | 2026-11-14 |
| automattic.github.com | Not in the scope | 2026-11-14 |
| automotive.github.com | Not in the scope | 2026-11-14 |
| autonome.github.com | Not in the scope | 2026-11-14 |
| autonomylab.github.com | Not in the scope | 2026-11-14 |
| autoplataforma.github.com | Not in the scope | 2026-11-14 |
| autoreply.github.com | Not in the scope | 2026-11-14 |
| autoresponder.github.com | Not in the scope | 2026-11-14 |
| autos.github.com | Not in the scope | 2026-11-14 |
| www.autos.github.com | Not in the scope | 2026-11-14 |
| autotelicum.github.com | Not in the scope | 2026-11-14 |
| autotest.github.com | Not in the scope | 2026-11-14 |
| autumnhui.github.com | Not in the scope | 2026-11-14 |
| auxesis.github.com | Not in the scope | 2026-11-14 |
| auxten.github.com | Not in the scope | 2026-11-14 |
| auzzy.github.com | Not in the scope | 2026-11-14 |
| av.github.com | Not in the scope | 2026-11-14 |
| www.av.github.com | Not in the scope | 2026-11-14 |
| av1.github.com | Not in the scope | 2026-11-14 |
| av8d.github.com | Not in the scope | 2026-11-14 |
| mail.av8d.github.commail | Not in the scope | 2026-11-14 |
| ava.github.com | Not in the scope | 2026-11-14 |
| www.ava.github.com | Not in the scope | 2026-11-14 |
| avacaflores.github.com | Not in the scope | 2026-11-14 |
| avalade.github.com | Not in the scope | 2026-11-14 |
| avalanche.github.com | Not in the scope | 2026-11-14 |
| avalanche123.github.com | Not in the scope | 2026-11-14 |
0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.