Bug bounty program
EV
Equifax-vdp
Most upvoted reports7
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Important information leaked on GithubAnalysed#649322 | Authentication | 2019-08-22 | – | 98 |
| reflected XSS in [www.equifax.com]Analysed#1818163 | Cross-site Scripting | 2023-04-23 | – | 47 |
| Subdomain takeover at http://test.www.midigator.comAnalysed#1718371 | Access Control | 2022-11-12 | – | 32 |
| Open SonarQube instance leaking internal source code#947946 | Information Disclosure | 2020-09-03 | – | 20 |
| reflected XSS in [www.equifax.com]#1818172 | Cross-site Scripting | 2023-04-23 | – | 19 |
| Information Leak (Github)#694931 | No weakness recorded | 2020-04-09 | – | 17 |
| RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638 | Cross-site Scripting | 2022-03-09 | – | 6 |
Subdomains55,670
| Name | Scope | First seen |
|---|---|---|
| clarkdo.github.com | Not in the scope | 2026-11-14 |
| clarkf.github.com | Not in the scope | 2026-11-14 |
| clarkparsia.github.com | Not in the scope | 2026-11-14 |
| clarkwrks.github.com | Not in the scope | 2026-11-14 |
| clarle.github.com | Not in the scope | 2026-11-14 |
| clasificados.github.com | Not in the scope | 2026-11-14 |
| www.clasificados.github.com | Not in the scope | 2026-11-14 |
| class.github.com | Not in the scope | 2026-11-14 |
| dns.class.github.com | Not in the scope | 2026-11-14 |
| classam.github.com | Not in the scope | 2026-11-14 |
| classes.github.com | Not in the scope | 2026-11-14 |
| classic.github.comlegacy | Not in the scope | 2026-11-14 |
| classico.github.com | Not in the scope | 2026-11-14 |
| classificados.github.com | Not in the scope | 2026-11-14 |
| classified.github.com | Not in the scope | 2026-11-14 |
| classifieds.github.com | Not in the scope | 2026-11-14 |
| autoconfig.classifieds.github.com | Not in the scope | 2026-11-14 |
| autodiscover.classifieds.github.commail | Not in the scope | 2026-11-14 |
| webdisk.classifieds.github.com | Not in the scope | 2026-11-14 |
| www.classifieds.github.com | Not in the scope | 2026-11-14 |
| classroom.github.com | Not in the scope | 2026-11-14 |
| _cuplogin.classroom.github.com | Not in the scope | 2026-11-14 |
| _etcd-server-ssl.classroom.github.com | Not in the scope | 2026-11-14 |
| _mta-sts.classroom.github.com | Not in the scope | 2026-11-14 |
| _tcp.classroom.github.com | Not in the scope | 2026-11-14 |
| _cisco-uds._tcp.classroom.github.com | Not in the scope | 2026-11-14 |
| _cuplogin._tcp.classroom.github.com | Not in the scope | 2026-11-14 |
| _collab-edge._tls.classroom.github.com | Not in the scope | 2026-11-14 |
| a.classroom.github.com | Not in the scope | 2026-11-14 |
| admin.classroom.github.comadmin | Not in the scope | 2026-11-14 |
| akamai-test.classroom.github.comtest | Not in the scope | 2026-11-14 |
| api.classroom.github.comapi | Not in the scope | 2026-11-14 |
| app.classroom.github.com | Not in the scope | 2026-11-14 |
| auth.classroom.github.comauth | Not in the scope | 2026-11-14 |
| autoconfig.classroom.github.com | Not in the scope | 2026-11-14 |
| autodiscover.classroom.github.commail | Not in the scope | 2026-11-14 |
| basic.classroom.github.com | Not in the scope | 2026-11-14 |
| basic-nodejs-dev.classroom.github.comdev | Not in the scope | 2026-11-14 |
| blog.classroom.github.com | Not in the scope | 2026-11-14 |
| careers.classroom.github.com | Not in the scope | 2026-11-14 |
| cert.classroom.github.com | Not in the scope | 2026-11-14 |
| check.classroom.github.com | Not in the scope | 2026-11-14 |
| ci.classroom.github.comci | Not in the scope | 2026-11-14 |
| cim-api.classroom.github.comapi | Not in the scope | 2026-11-14 |
| cim-api-dev.classroom.github.comapi, dev | Not in the scope | 2026-11-14 |
| cim-data-quality-qa.classroom.github.comtest | Not in the scope | 2026-11-14 |
| cim-geo-dev.classroom.github.comdev | Not in the scope | 2026-11-14 |
| citrix.classroom.github.comvpn | Not in the scope | 2026-11-14 |
| cloud.classroom.github.com | Not in the scope | 2026-11-14 |
| cname.classroom.github.com | Not in the scope | 2026-11-14 |
| code.classroom.github.com | Not in the scope | 2026-11-14 |
| collab.classroom.github.com | Not in the scope | 2026-11-14 |
| cpanel.classroom.github.comadmin | Not in the scope | 2026-11-14 |
| cveapi.classroom.github.com | Not in the scope | 2026-11-14 |
| de.classroom.github.com | Not in the scope | 2026-11-14 |
| dns.classroom.github.com | Not in the scope | 2026-11-14 |
| dns1.classroom.github.com | Not in the scope | 2026-11-14 |
| docker.classroom.github.comtools | Not in the scope | 2026-11-14 |
| dogfood-dev.classroom.github.comdev | Not in the scope | 2026-11-14 |
| download.classroom.github.com | Not in the scope | 2026-11-14 |
| edge.classroom.github.com | Not in the scope | 2026-11-14 |
| en.classroom.github.com | Not in the scope | 2026-11-14 |
| exchange.classroom.github.commail | Not in the scope | 2026-11-14 |
| forums.classroom.github.com | Not in the scope | 2026-11-14 |
| fw.classroom.github.com | Not in the scope | 2026-11-14 |
| ga.classroom.github.com | Not in the scope | 2026-11-14 |
| gac-rds-external-readonly-preprod.classroom.github.comstaging | Not in the scope | 2026-11-14 |
| gcom-product-find-dev.classroom.github.comdev | Not in the scope | 2026-11-14 |
| gcom-product-find-qa.classroom.github.comtest | Not in the scope | 2026-11-14 |
| git.classroom.github.comgit | Not in the scope | 2026-11-14 |
| gitlab.classroom.github.comgit | Not in the scope | 2026-11-14 |
| go.classroom.github.com | Not in the scope | 2026-11-14 |
| gui.classroom.github.com | Not in the scope | 2026-11-14 |
| gws-api-sandbox.classroom.github.comapi, test | Not in the scope | 2026-11-14 |
| gws-rds-external-readonly-uat.classroom.github.comtest | Not in the scope | 2026-11-14 |
| home.classroom.github.com | Not in the scope | 2026-11-14 |
| hostmaster.classroom.github.com | Not in the scope | 2026-11-14 |
| httpbin.classroom.github.com | Not in the scope | 2026-11-14 |
| iam.classroom.github.comauth | Not in the scope | 2026-11-14 |
| imap.classroom.github.commail | Not in the scope | 2026-11-14 |
| internal.classroom.github.cominternal | Not in the scope | 2026-11-14 |
| ip.classroom.github.com | Not in the scope | 2026-11-14 |
| ipv6.classroom.github.com | Not in the scope | 2026-11-14 |
| job.classroom.github.com | Not in the scope | 2026-11-14 |
| knowledgemanagement.classroom.github.com | Not in the scope | 2026-11-14 |
| ks-inventory-api.classroom.github.comapi | Not in the scope | 2026-11-14 |
| ks-limits-api.classroom.github.comapi | Not in the scope | 2026-11-14 |
| ks-program-api.classroom.github.comapi | Not in the scope | 2026-11-14 |
| ks-vendingtransactions-mq0.classroom.github.com | Not in the scope | 2026-11-14 |
| ks-vendingtransactions-mq1.classroom.github.com | Not in the scope | 2026-11-14 |
| ks-vendingtransactions-mq2.classroom.github.com | Not in the scope | 2026-11-14 |
| ks-vendingtransactions-mq3.classroom.github.com | Not in the scope | 2026-11-14 |
| ks-vendingtransactions-mq4.classroom.github.com | Not in the scope | 2026-11-14 |
| lists.classroom.github.com | Not in the scope | 2026-11-14 |
| liveupdate.classroom.github.com | Not in the scope | 2026-11-14 |
| login.classroom.github.comauth | Not in the scope | 2026-11-14 |
| m.classroom.github.com | Not in the scope | 2026-11-14 |
| mail.classroom.github.commail | Not in the scope | 2026-11-14 |
| mail1.classroom.github.commail | Not in the scope | 2026-11-14 |
| mdm.classroom.github.com | Not in the scope | 2026-11-14 |
0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.