Bug bounty program
EV
Equifax-vdp
Most upvoted reports7
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Important information leaked on GithubAnalysed#649322 | Authentication | 2019-08-22 | – | 98 |
| reflected XSS in [www.equifax.com]Analysed#1818163 | Cross-site Scripting | 2023-04-23 | – | 47 |
| Subdomain takeover at http://test.www.midigator.com#1718371 | Access Control | 2022-11-12 | – | 32 |
| Open SonarQube instance leaking internal source code#947946 | Information Disclosure | 2020-09-03 | – | 20 |
| reflected XSS in [www.equifax.com]#1818172 | Cross-site Scripting | 2023-04-23 | – | 19 |
| Information Leak (Github)#694931 | No weakness recorded | 2020-04-09 | – | 17 |
| RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638 | Cross-site Scripting | 2022-03-09 | – | 6 |
Subdomains55,670
| Name | Scope | First seen |
|---|---|---|
| berdario.github.com | Not in the scope | 2026-11-14 |
| berekuk.github.com | Not in the scope | 2026-11-14 |
| bergie.github.com | Not in the scope | 2026-11-14 |
| bergquist.github.com | Not in the scope | 2026-11-14 |
| beritra.github.com | Not in the scope | 2026-11-14 |
| berkerpeksag.github.com | Not in the scope | 2026-11-14 |
| berkes.github.com | Not in the scope | 2026-11-14 |
| berklee.github.com | Not in the scope | 2026-11-14 |
| berkus.github.com | Not in the scope | 2026-11-14 |
| berlin.github.com | Not in the scope | 2026-11-14 |
| berlinbrown.github.com | Not in the scope | 2026-11-14 |
| berlingeekettes.github.com | Not in the scope | 2026-11-14 |
| berlinonline.github.com | Not in the scope | 2026-11-14 |
| berlinphp.github.com | Not in the scope | 2026-11-14 |
| bermi.github.com | Not in the scope | 2026-11-14 |
| bermudezca.github.com | Not in the scope | 2026-11-14 |
| bernardoantunes.github.com | Not in the scope | 2026-11-14 |
| bernerdschaefer.github.com | Not in the scope | 2026-11-14 |
| bernii.github.com | Not in the scope | 2026-11-14 |
| berny.github.com | Not in the scope | 2026-11-14 |
| berreman4x4.github.com | Not in the scope | 2026-11-14 |
| berrorspbz.github.com | Not in the scope | 2026-11-14 |
| berry.github.com | Not in the scope | 2026-11-14 |
| berryp.github.com | Not in the scope | 2026-11-14 |
| bert.github.com | Not in the scope | 2026-11-14 |
| bertfrees.github.com | Not in the scope | 2026-11-14 |
| bertgamotacorp.github.com | Not in the scope | 2026-11-14 |
| bertomartin.github.com | Not in the scope | 2026-11-14 |
| bertramdev.github.com | Not in the scope | 2026-11-14 |
| berty38.github.com | Not in the scope | 2026-11-14 |
| bertzzie.github.com | Not in the scope | 2026-11-14 |
| beryl.github.com | Not in the scope | 2026-11-14 |
| beryllium.github.com | Not in the scope | 2026-11-14 |
| bes.github.com | Not in the scope | 2026-11-14 |
| bescala.github.com | Not in the scope | 2026-11-14 |
| beschulz.github.com | Not in the scope | 2026-11-14 |
| besfro.github.com | Not in the scope | 2026-11-14 |
| bespokepost.github.com | Not in the scope | 2026-11-14 |
| best.github.com | Not in the scope | 2026-11-14 |
| www.best.github.com | Not in the scope | 2026-11-14 |
| bestcar.github.com | Not in the scope | 2026-11-14 |
| bestcodecs.github.com | Not in the scope | 2026-11-14 |
| bestdeal.github.com | Not in the scope | 2026-11-14 |
| bestdigitalcodecs.github.com | Not in the scope | 2026-11-14 |
| bestelios.github.com | Not in the scope | 2026-11-14 |
| besteric.github.com | Not in the scope | 2026-11-14 |
| bestform.github.com | Not in the scope | 2026-11-14 |
| bestfreecodecs.github.com | Not in the scope | 2026-11-14 |
| bestiejs.github.com | Not in the scope | 2026-11-14 |
| bestlivecodecs.github.com | Not in the scope | 2026-11-14 |
| bestmediacodecs.github.com | Not in the scope | 2026-11-14 |
| bestmediafile.github.com | Not in the scope | 2026-11-14 |
| bestmediafileinc.github.com | Not in the scope | 2026-11-14 |
| bestmediafiles.github.com | Not in the scope | 2026-11-14 |
| bestmediafilesinc.github.com | Not in the scope | 2026-11-14 |
| bestnewcodecs.github.com | Not in the scope | 2026-11-14 |
| bestseller.github.com | Not in the scope | 2026-11-14 |
| bestthiscodecs.github.com | Not in the scope | 2026-11-14 |
| bestway.github.com | Not in the scope | 2026-11-14 |
| bestwillcui.github.com | Not in the scope | 2026-11-14 |
| bet.github.com | Not in the scope | 2026-11-14 |
| bet365zaixianyule-sigmavirus.github.com | Not in the scope | 2026-11-14 |
| bet365zuikuaiwangzhisigmavirus.github.com | Not in the scope | 2026-11-14 |
| beta.github.comstaging | Not in the scope | 2026-11-14 |
| beta-antivirus.github.comstaging | Not in the scope | 2026-11-14 |
| antivirus.beta.github.comstaging | Not in the scope | 2026-11-14 |
| api-v3.beta.github.comapi, staging | Not in the scope | 2026-11-14 |
| autoconfig.beta.github.comstaging | Not in the scope | 2026-11-14 |
| autodiscover.beta.github.commail, staging | Not in the scope | 2026-11-14 |
| covid19.beta.github.comstaging | Not in the scope | 2026-11-14 |
| m.beta.github.comstaging | Not in the scope | 2026-11-14 |
| virus.beta.github.comstaging | Not in the scope | 2026-11-14 |
| webdisk.beta.github.comstaging | Not in the scope | 2026-11-14 |
| www.beta.github.comstaging | Not in the scope | 2026-11-14 |
| beta1.github.comstaging | Not in the scope | 2026-11-14 |
| beta2.github.comstaging | Not in the scope | 2026-11-14 |
| beta3.github.comstaging | Not in the scope | 2026-11-14 |
| beta4.github.comstaging | Not in the scope | 2026-11-14 |
| betaa.github.com | Not in the scope | 2026-11-14 |
| betablog.github.com | Not in the scope | 2026-11-14 |
| betac.github.com | Not in the scope | 2026-11-14 |
| betainabox.github.com | Not in the scope | 2026-11-14 |
| betajaen.github.com | Not in the scope | 2026-11-14 |
| betamaxteam.github.com | Not in the scope | 2026-11-14 |
| betanalpha.github.com | Not in the scope | 2026-11-14 |
| betarelease.github.com | Not in the scope | 2026-11-14 |
| betav2.github.com | Not in the scope | 2026-11-14 |
| betawaffle.github.com | Not in the scope | 2026-11-14 |
| betbaijialekaihu-antivirus.github.com | Not in the scope | 2026-11-14 |
| beth.github.com | Not in the scope | 2026-11-14 |
| beth-yang.github.com | Not in the scope | 2026-11-14 |
| betravis.github.com | Not in the scope | 2026-11-14 |
| betravis-sigmavirus.github.com | Not in the scope | 2026-11-14 |
| betsmartmedia.github.com | Not in the scope | 2026-11-14 |
| better-history.github.com | Not in the scope | 2026-11-14 |
| betterelephant.github.com | Not in the scope | 2026-11-14 |
| betterelephantantivirus.github.com | Not in the scope | 2026-11-14 |
| bettse.github.com | Not in the scope | 2026-11-14 |
| betty.github.com | Not in the scope | 2026-11-14 |
| bevry.github.com | Not in the scope | 2026-11-14 |
0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.