Bug bounty program
EV
Equifax-vdp
Most upvoted reports7
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Important information leaked on GithubAnalysed#649322 | Authentication | 2019-08-22 | – | 98 |
| reflected XSS in [www.equifax.com]Analysed#1818163 | Cross-site Scripting | 2023-04-23 | – | 47 |
| Subdomain takeover at http://test.www.midigator.comAnalysed#1718371 | Access Control | 2022-11-12 | – | 32 |
| Open SonarQube instance leaking internal source code#947946 | Information Disclosure | 2020-09-03 | – | 20 |
| reflected XSS in [www.equifax.com]#1818172 | Cross-site Scripting | 2023-04-23 | – | 19 |
| Information Leak (Github)#694931 | No weakness recorded | 2020-04-09 | – | 17 |
| RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638 | Cross-site Scripting | 2022-03-09 | – | 6 |
Subdomains55,670
| Name | Scope | First seen |
|---|---|---|
| citadel.github.com | Not in the scope | 2026-11-14 |
| citation-style-editor.github.com | Not in the scope | 2026-11-14 |
| citation-style-editor-antivirus.github.com | Not in the scope | 2026-11-14 |
| citedx.github.com | Not in the scope | 2026-11-14 |
| citibank.github.com | Not in the scope | 2026-11-14 |
| cities.github.com | Not in the scope | 2026-11-14 |
| citizen428.github.com | Not in the scope | 2026-11-14 |
| citizero.github.com | Not in the scope | 2026-11-14 |
| citrix.github.comvpn | Not in the scope | 2026-11-14 |
| citrix1.github.comvpn | Not in the scope | 2026-11-14 |
| citrix2.github.comvpn | Not in the scope | 2026-11-14 |
| citroen.github.com | Not in the scope | 2026-11-14 |
| citron.github.com | Not in the scope | 2026-11-14 |
| citrus.github.com | Not in the scope | 2026-11-14 |
| citruspi.github.com | Not in the scope | 2026-11-14 |
| city.github.com | Not in the scope | 2026-11-14 |
| www.city.github.com | Not in the scope | 2026-11-14 |
| city41.github.com | Not in the scope | 2026-11-14 |
| citylive.github.com | Not in the scope | 2026-11-14 |
| cityofgreatersudbury.github.com | Not in the scope | 2026-11-14 |
| cityofphiladelphia.github.com | Not in the scope | 2026-11-14 |
| citytracking.github.com | Not in the scope | 2026-11-14 |
| ciudadanointeligente.github.com | Not in the scope | 2026-11-14 |
| ciupicri.github.com | Not in the scope | 2026-11-14 |
| civascu.github.com | Not in the scope | 2026-11-14 |
| civicdb.github.com | Not in the scope | 2026-11-14 |
| civictechwr.github.com | Not in the scope | 2026-11-14 |
| civil.github.com | Not in the scope | 2026-11-14 |
| cj.github.com | Not in the scope | 2026-11-14 |
| cjadvertising.github.com | Not in the scope | 2026-11-14 |
| cjauvin.github.com | Not in the scope | 2026-11-14 |
| cjbrock.github.com | Not in the scope | 2026-11-14 |
| cjc.github.com | Not in the scope | 2026-11-14 |
| cjcliffe.github.com | Not in the scope | 2026-11-14 |
| cjdb.github.com | Not in the scope | 2026-11-14 |
| cjdev.github.com | Not in the scope | 2026-11-14 |
| cjdsie.github.com | Not in the scope | 2026-11-14 |
| cjerdonek.github.com | Not in the scope | 2026-11-14 |
| cjfuller.github.com | Not in the scope | 2026-11-14 |
| cjgammon.github.com | Not in the scope | 2026-11-14 |
| cjh608.github.com | Not in the scope | 2026-11-14 |
| cjheath.github.com | Not in the scope | 2026-11-14 |
| bouncer.cjheppell.github.com | Not in the scope | 2026-11-14 |
| finalizer.tcpservice.bouncer.cjheppell.github.com | Not in the scope | 2026-11-14 |
| tcpservices.bouncer.cjheppell.github.com | Not in the scope | 2026-11-14 |
| cjj9812.github.com | Not in the scope | 2026-11-14 |
| cjjer.github.com | Not in the scope | 2026-11-14 |
| cjlucas.github.com | Not in the scope | 2026-11-14 |
| cjoh.github.com | Not in the scope | 2026-11-14 |
| cjolif.github.com | Not in the scope | 2026-11-14 |
| cjpl.github.com | Not in the scope | 2026-11-14 |
| cjreiner.github.com | Not in the scope | 2026-11-14 |
| cjs8487.github.com | Not in the scope | 2026-11-14 |
| cjsharp1.github.com | Not in the scope | 2026-11-14 |
| cjc6m.cjsmq.github.com | Not in the scope | 2026-11-14 |
| cjwoodward.github.com | Not in the scope | 2026-11-14 |
| cjxgm.github.com | Not in the scope | 2026-11-14 |
| cjxy.github.com | Not in the scope | 2026-11-14 |
| cjxy-cdnantivirus.github.com | Not in the scope | 2026-11-14 |
| cjy.github.com | Not in the scope | 2026-11-14 |
| ck.github.com | Not in the scope | 2026-11-14 |
| ckaestne.github.com | Not in the scope | 2026-11-14 |
| ckarea.github.com | Not in the scope | 2026-11-14 |
| mail.ckarea.github.commail | Not in the scope | 2026-11-14 |
| cketti.github.com | Not in the scope | 2026-11-14 |
| ckhung.github.com | Not in the scope | 2026-11-14 |
| ckihneman.github.com | Not in the scope | 2026-11-14 |
| ckimrie.github.com | Not in the scope | 2026-11-14 |
| ckirkendall.github.com | Not in the scope | 2026-11-14 |
| ckknight.github.com | Not in the scope | 2026-11-14 |
| ckloote.github.com | Not in the scope | 2026-11-14 |
| cknan.github.com | Not in the scope | 2026-11-14 |
| ckrack.github.com | Not in the scope | 2026-11-14 |
| ckulla.github.com | Not in the scope | 2026-11-14 |
| ckunte.github.com | Not in the scope | 2026-11-14 |
| ckw-mod.github.com | Not in the scope | 2026-11-14 |
| ckwalsh.github.com | Not in the scope | 2026-11-14 |
| cl.github.com | Not in the scope | 2026-11-14 |
| www.cl.github.com | Not in the scope | 2026-11-14 |
| cl1.github.com | Not in the scope | 2026-11-14 |
| cla.github.com | Not in the scope | 2026-11-14 |
| clab.github.com | Not in the scope | 2026-11-14 |
| clabot.github.com | Not in the scope | 2026-11-14 |
| clack.github.com | Not in the scope | 2026-11-14 |
| claeusdev.github.com | Not in the scope | 2026-11-14 |
| claims.github.com | Not in the scope | 2026-11-14 |
| claird.github.com | Not in the scope | 2026-11-14 |
| claire.github.com | Not in the scope | 2026-11-14 |
| clalancette.github.com | Not in the scope | 2026-11-14 |
| clan.github.com | Not in the scope | 2026-11-14 |
| clandence.github.com | Not in the scope | 2026-11-14 |
| clang-omp.github.com | Not in the scope | 2026-11-14 |
| clans.github.com | Not in the scope | 2026-11-14 |
| clara.github.com | Not in the scope | 2026-11-14 |
| clare.github.com | Not in the scope | 2026-11-14 |
| clarete.github.com | Not in the scope | 2026-11-14 |
| claria-ai.github.com | Not in the scope | 2026-11-14 |
| clarity.github.com | Not in the scope | 2026-11-14 |
| clark.github.com | Not in the scope | 2026-11-14 |
| clark-kent.github.com | Not in the scope | 2026-11-14 |
0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.