Bug bounty program
EV
Equifax-vdp
Most upvoted reports7
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Important information leaked on GithubAnalysed#649322 | Authentication | 2019-08-22 | – | 98 |
| reflected XSS in [www.equifax.com]Analysed#1818163 | Cross-site Scripting | 2023-04-23 | – | 47 |
| Subdomain takeover at http://test.www.midigator.comAnalysed#1718371 | Access Control | 2022-11-12 | – | 32 |
| Open SonarQube instance leaking internal source code#947946 | Information Disclosure | 2020-09-03 | – | 20 |
| reflected XSS in [www.equifax.com]#1818172 | Cross-site Scripting | 2023-04-23 | – | 19 |
| Information Leak (Github)#694931 | No weakness recorded | 2020-04-09 | – | 17 |
| RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638 | Cross-site Scripting | 2022-03-09 | – | 6 |
Subdomains55,670
| Name | Scope | First seen |
|---|---|---|
| media.classroom.github.com | Not in the scope | 2026-11-14 |
| metrics.classroom.github.commonitoring | Not in the scope | 2026-11-14 |
| mobile.classroom.github.com | Not in the scope | 2026-11-14 |
| mobile-rest.classroom.github.com | Not in the scope | 2026-11-14 |
| mongodb.classroom.github.comdata | Not in the scope | 2026-11-14 |
| mssql.classroom.github.com | Not in the scope | 2026-11-14 |
| mta-sts.classroom.github.com | Not in the scope | 2026-11-14 |
| mx.classroom.github.commail | Not in the scope | 2026-11-14 |
| mx01.classroom.github.com | Not in the scope | 2026-11-14 |
| mx1.classroom.github.com | Not in the scope | 2026-11-14 |
| news.classroom.github.com | Not in the scope | 2026-11-14 |
| nginx-newest.classroom.github.com | Not in the scope | 2026-11-14 |
| nginx-newest1.classroom.github.com | Not in the scope | 2026-11-14 |
| nodejs-dev.classroom.github.comdev | Not in the scope | 2026-11-14 |
| ns.classroom.github.com | Not in the scope | 2026-11-14 |
| ns1.classroom.github.com | Not in the scope | 2026-11-14 |
| ns4.classroom.github.com | Not in the scope | 2026-11-14 |
| office.classroom.github.com | Not in the scope | 2026-11-14 |
| okta.classroom.github.comauth | Not in the scope | 2026-11-14 |
| outlook.classroom.github.com | Not in the scope | 2026-11-14 |
| owa.classroom.github.commail | Not in the scope | 2026-11-14 |
| pop.classroom.github.com | Not in the scope | 2026-11-14 |
| pop3.classroom.github.commail | Not in the scope | 2026-11-14 |
| postmaster.classroom.github.com | Not in the scope | 2026-11-14 |
| pre.classroom.github.com | Not in the scope | 2026-11-14 |
| pre-prod.classroom.github.com | Not in the scope | 2026-11-14 |
| proxy.classroom.github.com | Not in the scope | 2026-11-14 |
| publishing-catalog.classroom.github.com | Not in the scope | 2026-11-14 |
| publishing-preview.classroom.github.comstaging | Not in the scope | 2026-11-14 |
| rx.classroom.github.com | Not in the scope | 2026-11-14 |
| searchportal-dev.classroom.github.comdev | Not in the scope | 2026-11-14 |
| searchportal-qa.classroom.github.comtest | Not in the scope | 2026-11-14 |
| secure.classroom.github.com | Not in the scope | 2026-11-14 |
| server.classroom.github.com | Not in the scope | 2026-11-14 |
| shop.classroom.github.com | Not in the scope | 2026-11-14 |
| signup.classroom.github.com | Not in the scope | 2026-11-14 |
| sitecore.classroom.github.com | Not in the scope | 2026-11-14 |
| spf.classroom.github.com | Not in the scope | 2026-11-14 |
| sslvpn.classroom.github.comvpn | Not in the scope | 2026-11-14 |
| sso.classroom.github.comauth | Not in the scope | 2026-11-14 |
| stage.classroom.github.comstaging | Not in the scope | 2026-11-14 |
| stats.classroom.github.com | Not in the scope | 2026-11-14 |
| store.classroom.github.com | Not in the scope | 2026-11-14 |
| storybook.classroom.github.com | Not in the scope | 2026-11-14 |
| support.classroom.github.com | Not in the scope | 2026-11-14 |
| tcp.classroom.github.com | Not in the scope | 2026-11-14 |
| test.classroom.github.comtest | Not in the scope | 2026-11-14 |
| tls.classroom.github.com | Not in the scope | 2026-11-14 |
| tx.classroom.github.com | Not in the scope | 2026-11-14 |
| uk.classroom.github.com | Not in the scope | 2026-11-14 |
| upload.classroom.github.comdata | Not in the scope | 2026-11-14 |
| us-east.classroom.github.com | Not in the scope | 2026-11-14 |
| us-east-1.classroom.github.com | Not in the scope | 2026-11-14 |
| vendor.classroom.github.com | Not in the scope | 2026-11-14 |
| vendors.classroom.github.com | Not in the scope | 2026-11-14 |
| video.classroom.github.com | Not in the scope | 2026-11-14 |
| videos.classroom.github.com | Not in the scope | 2026-11-14 |
| view.classroom.github.com | Not in the scope | 2026-11-14 |
| voice.classroom.github.com | Not in the scope | 2026-11-14 |
| webmail.classroom.github.commail | Not in the scope | 2026-11-14 |
| whois.classroom.github.com | Not in the scope | 2026-11-14 |
| wordpress.classroom.github.com | Not in the scope | 2026-11-14 |
| wp.classroom.github.com | Not in the scope | 2026-11-14 |
| ww1.classroom.github.com | Not in the scope | 2026-11-14 |
| www.classroom.github.com | Not in the scope | 2026-11-14 |
| www2.classroom.github.com | Not in the scope | 2026-11-14 |
| claude.github.com | Not in the scope | 2026-11-14 |
| claudenw.github.com | Not in the scope | 2026-11-14 |
| claudijd.github.com | Not in the scope | 2026-11-14 |
| claudine.github.com | Not in the scope | 2026-11-14 |
| claudiob.github.com | Not in the scope | 2026-11-14 |
| claudioc.github.com | Not in the scope | 2026-11-14 |
| claudiordgz.github.com | Not in the scope | 2026-11-14 |
| claudius-kienle.github.com | Not in the scope | 2026-11-14 |
| clausklein.github.com | Not in the scope | 2026-11-14 |
| clausreinke.github.com | Not in the scope | 2026-11-14 |
| clauswitt.github.com | Not in the scope | 2026-11-14 |
| claw16.github.com | Not in the scope | 2026-11-14 |
| claw666.github.com | Not in the scope | 2026-11-14 |
| clawpack.github.com | Not in the scope | 2026-11-14 |
| claws.github.com | Not in the scope | 2026-11-14 |
| clay.github.com | Not in the scope | 2026-11-14 |
| clayallsopp.github.com | Not in the scope | 2026-11-14 |
| clayh53.github.com | Not in the scope | 2026-11-14 |
| claymore.github.com | Not in the scope | 2026-11-14 |
| claytonbarnette.github.com | Not in the scope | 2026-11-14 |
| claytron.github.com | Not in the scope | 2026-11-14 |
| clayzermk1.github.com | Not in the scope | 2026-11-14 |
| clc.github.com | Not in the scope | 2026-11-14 |
| cldscript.github.com | Not in the scope | 2026-11-14 |
| cldwalker.github.com | Not in the scope | 2026-11-14 |
| cleamoon.github.com | Not in the scope | 2026-11-14 |
| clean.github.com | Not in the scope | 2026-11-14 |
| cleaning.github.com | Not in the scope | 2026-11-14 |
| cleanweb-uk.github.com | Not in the scope | 2026-11-14 |
| clear.github.com | Not in the scope | 2026-11-14 |
| clearleft.github.com | Not in the scope | 2026-11-14 |
| rika.clearly-non-existent.github.com | Not in the scope | 2026-11-14 |
| clearsightstudio.github.com | Not in the scope | 2026-11-14 |
| clearskies.github.com | Not in the scope | 2026-11-14 |
0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.