Bug bounty program
EV
Equifax-vdp
Most upvoted reports7
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Important information leaked on GithubAnalysed#649322 | Authentication | 2019-08-22 | – | 98 |
| reflected XSS in [www.equifax.com]Analysed#1818163 | Cross-site Scripting | 2023-04-23 | – | 47 |
| Subdomain takeover at http://test.www.midigator.comAnalysed#1718371 | Access Control | 2022-11-12 | – | 32 |
| Open SonarQube instance leaking internal source code#947946 | Information Disclosure | 2020-09-03 | – | 20 |
| reflected XSS in [www.equifax.com]#1818172 | Cross-site Scripting | 2023-04-23 | – | 19 |
| Information Leak (Github)#694931 | No weakness recorded | 2020-04-09 | – | 17 |
| RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638 | Cross-site Scripting | 2022-03-09 | – | 6 |
Subdomains55,670
| Name | Scope | First seen |
|---|---|---|
| codjo.github.com | Not in the scope | 2026-11-14 |
| codler.github.com | Not in the scope | 2026-11-14 |
| codmajik.github.com | Not in the scope | 2026-11-14 |
| coduinix.github.com | Not in the scope | 2026-11-14 |
| cody.github.com | Not in the scope | 2026-11-14 |
| codylund.github.com | Not in the scope | 2026-11-14 |
| codyrioux.github.com | Not in the scope | 2026-11-14 |
| codyscott.github.com | Not in the scope | 2026-11-14 |
| codystebbins.github.com | Not in the scope | 2026-11-14 |
| coennengerman.github.com | Not in the scope | 2026-11-14 |
| coexps-coexps.github.com | Not in the scope | 2026-11-14 |
| cofess.github.com | Not in the scope | 2026-11-14 |
| coffee.github.com | Not in the scope | 2026-11-14 |
| coffeeaddict.github.com | Not in the scope | 2026-11-14 |
| coffeemate.github.com | Not in the scope | 2026-11-14 |
| coffeescript-cookbook.github.com | Not in the scope | 2026-11-14 |
| coffeescript2ru.github.com | Not in the scope | 2026-11-14 |
| cogdog.github.com | Not in the scope | 2026-11-14 |
| cogent.github.com | Not in the scope | 2026-11-14 |
| cognitom.github.com | Not in the scope | 2026-11-14 |
| cognos.github.com | Not in the scope | 2026-11-14 |
| cogu.github.com | Not in the scope | 2026-11-14 |
| cohakim.github.com | Not in the scope | 2026-11-14 |
| cohenjo.github.com | Not in the scope | 2026-11-14 |
| coherence-community.github.com | Not in the scope | 2026-11-14 |
| cohitre.github.com | Not in the scope | 2026-11-14 |
| cohoe.github.com | Not in the scope | 2026-11-14 |
| cohtan.github.com | Not in the scope | 2026-11-14 |
| coin.github.com | Not in the scope | 2026-11-14 |
| coins.github.com | Not in the scope | 2026-11-14 |
| coins11.github.com | Not in the scope | 2026-11-14 |
| coiscir.github.com | Not in the scope | 2026-11-14 |
| cojen.github.com | Not in the scope | 2026-11-14 |
| coke.github.com | Not in the scope | 2026-11-14 |
| cokotracy.github.com | Not in the scope | 2026-11-14 |
| colabore.github.com | Not in the scope | 2026-11-14 |
| colah.github.com | Not in the scope | 2026-11-14 |
| colbyr.github.com | Not in the scope | 2026-11-14 |
| coldestheart.github.com | Not in the scope | 2026-11-14 |
| coldhead.github.com | Not in the scope | 2026-11-14 |
| coldmind.github.com | Not in the scope | 2026-11-14 |
| coldnew.github.com | Not in the scope | 2026-11-14 |
| coldnight.github.com | Not in the scope | 2026-11-14 |
| coleman.github.com | Not in the scope | 2026-11-14 |
| colepos-osm-ar.github.com | Not in the scope | 2026-11-14 |
| colersheridan.github.com | Not in the scope | 2026-11-14 |
| colgate.github.com | Not in the scope | 2026-11-14 |
| colibri.github.com | Not in the scope | 2026-11-14 |
| colin-haber.github.com | Not in the scope | 2026-11-14 |
| colin-plus.github.com | Not in the scope | 2026-11-14 |
| colin-scott.github.com | Not in the scope | 2026-11-14 |
| colinbull.github.com | Not in the scope | 2026-11-14 |
| colincasey.github.com | Not in the scope | 2026-11-14 |
| colincatsu.github.com | Not in the scope | 2026-11-14 |
| colincsl.github.com | Not in the scope | 2026-11-14 |
| colineberhardt.github.com | Not in the scope | 2026-11-14 |
| colineberhardt-virus.github.com | Not in the scope | 2026-11-14 |
| colinf.github.com | Not in the scope | 2026-11-14 |
| colingo.github.com | Not in the scope | 2026-11-14 |
| colingourlay.github.com | Not in the scope | 2026-11-14 |
| colinloretz.github.com | Not in the scope | 2026-11-14 |
| colinmarc.github.com | Not in the scope | 2026-11-14 |
| colinramsay.github.com | Not in the scope | 2026-11-14 |
| colinyoung.github.com | Not in the scope | 2026-11-14 |
| collab.github.com | Not in the scope | 2026-11-14 |
| collab-edge.github.com | Not in the scope | 2026-11-14 |
| collaborate.github.com | Not in the scope | 2026-11-14 |
| collaboration.github.com | Not in the scope | 2026-11-14 |
| colladoc.github.com | Not in the scope | 2026-11-14 |
| collect.github.com | Not in the scope | 2026-11-14 |
| collection.github.com | Not in the scope | 2026-11-14 |
| collections.github.com | Not in the scope | 2026-11-14 |
| collective.github.com | Not in the scope | 2026-11-14 |
| collector.github.com | Not in the scope | 2026-11-14 |
| collector-cdn.github.com | Not in the scope | 2026-11-14 |
| collector-cdn-antivirus.github.com | Not in the scope | 2026-11-14 |
| alpha.collector.github.comstaging | Not in the scope | 2026-11-14 |
| demo.collector.github.comtest | Not in the scope | 2026-11-14 |
| live.collector.github.com | Not in the scope | 2026-11-14 |
| mail.collector.github.commail | Not in the scope | 2026-11-14 |
| news.collector.github.com | Not in the scope | 2026-11-14 |
| preview.collector.github.comstaging | Not in the scope | 2026-11-14 |
| private.collector.github.cominternal | Not in the scope | 2026-11-14 |
| prod.collector.github.com | Not in the scope | 2026-11-14 |
| www.collector.github.com | Not in the scope | 2026-11-14 |
| collecttix.github.com | Not in the scope | 2026-11-14 |
| college.github.com | Not in the scope | 2026-11-14 |
| collegebrain.github.com | Not in the scope | 2026-11-14 |
| collegedegrees.github.com | Not in the scope | 2026-11-14 |
| collidoscope.github.com | Not in the scope | 2026-11-14 |
| collin.github.com | Not in the scope | 2026-11-14 |
| collinhover.github.com | Not in the scope | 2026-11-14 |
| collins.github.com | Not in the scope | 2026-11-14 |
| collins401.github.com | Not in the scope | 2026-11-14 |
| collinstevens.github.com | Not in the scope | 2026-11-14 |
| colmarius.github.com | Not in the scope | 2026-11-14 |
| colmdoyle.github.com | Not in the scope | 2026-11-14 |
| colmind.github.com | Not in the scope | 2026-11-14 |
| colo.github.com | Not in the scope | 2026-11-14 |
| colocation.github.com | Not in the scope | 2026-11-14 |
0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.