Bug bounty program
EV
Equifax-vdp
Most upvoted reports7
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Important information leaked on GithubAnalysed#649322 | Authentication | 2019-08-22 | – | 98 |
| reflected XSS in [www.equifax.com]Analysed#1818163 | Cross-site Scripting | 2023-04-23 | – | 47 |
| Subdomain takeover at http://test.www.midigator.comAnalysed#1718371 | Access Control | 2022-11-12 | – | 32 |
| Open SonarQube instance leaking internal source code#947946 | Information Disclosure | 2020-09-03 | – | 20 |
| reflected XSS in [www.equifax.com]#1818172 | Cross-site Scripting | 2023-04-23 | – | 19 |
| Information Leak (Github)#694931 | No weakness recorded | 2020-04-09 | – | 17 |
| RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638 | Cross-site Scripting | 2022-03-09 | – | 6 |
Subdomains55,670
| Name | Scope | First seen |
|---|---|---|
| covid19-api-docs.github.comapi | Not in the scope | 2026-11-14 |
| covid19-api1.github.comapi | Not in the scope | 2026-11-14 |
| covid19-apollo.github.com | Not in the scope | 2026-11-14 |
| covid19-aws.github.com | Not in the scope | 2026-11-14 |
| covid19-backend.github.com | Not in the scope | 2026-11-14 |
| covid19-box.github.com | Not in the scope | 2026-11-14 |
| covid19-brand.github.com | Not in the scope | 2026-11-14 |
| covid19-brasil.github.com | Not in the scope | 2026-11-14 |
| covid19-c.github.com | Not in the scope | 2026-11-14 |
| covid19-cf.github.com | Not in the scope | 2026-11-14 |
| covid19-ci.github.comci | Not in the scope | 2026-11-14 |
| covid19-client.github.com | Not in the scope | 2026-11-14 |
| covid19-cms.github.comadmin | Not in the scope | 2026-11-14 |
| covid19-com.github.com | Not in the scope | 2026-11-14 |
| covid19-confluence.github.comtools | Not in the scope | 2026-11-14 |
| covid19-container.github.com | Not in the scope | 2026-11-14 |
| covid19-control.github.com | Not in the scope | 2026-11-14 |
| covid19-data.github.com | Not in the scope | 2026-11-14 |
| covid19-dec.github.com | Not in the scope | 2026-11-14 |
| covid19-dev.github.comdev | Not in the scope | 2026-11-14 |
| covid19-dev1.github.comdev | Not in the scope | 2026-11-14 |
| covid19-docker.github.comtools | Not in the scope | 2026-11-14 |
| covid19-drop.github.com | Not in the scope | 2026-11-14 |
| covid19-elasticbeanstalk.github.com | Not in the scope | 2026-11-14 |
| covid19-elb.github.com | Not in the scope | 2026-11-14 |
| covid19-engine.github.com | Not in the scope | 2026-11-14 |
| covid19-europe.github.com | Not in the scope | 2026-11-14 |
| covid19-euwe.github.com | Not in the scope | 2026-11-14 |
| covid19-evelynn.github.com | Not in the scope | 2026-11-14 |
| covid19-events.github.com | Not in the scope | 2026-11-14 |
| covid19-firewall.github.com | Not in the scope | 2026-11-14 |
| covid19-forum.github.com | Not in the scope | 2026-11-14 |
| covid19-frontpage.github.com | Not in the scope | 2026-11-14 |
| covid19-fw.github.com | Not in the scope | 2026-11-14 |
| covid19-gh.github.com | Not in the scope | 2026-11-14 |
| covid19-ghcpi.github.com | Not in the scope | 2026-11-14 |
| covid19-github.github.comgit | Not in the scope | 2026-11-14 |
| covid19-global.github.com | Not in the scope | 2026-11-14 |
| covid19-hw.github.com | Not in the scope | 2026-11-14 |
| covid19-hwcdn.github.com | Not in the scope | 2026-11-14 |
| covid19-ids.github.com | Not in the scope | 2026-11-14 |
| covid19-int.github.com | Not in the scope | 2026-11-14 |
| covid19-jenkins.github.comci | Not in the scope | 2026-11-14 |
| covid19-jinx.github.com | Not in the scope | 2026-11-14 |
| covid19-july.github.com | Not in the scope | 2026-11-14 |
| covid19-june.github.com | Not in the scope | 2026-11-14 |
| covid19-korea.github.com | Not in the scope | 2026-11-14 |
| covid19-kr.github.com | Not in the scope | 2026-11-14 |
| covid19-lan.github.com | Not in the scope | 2026-11-14 |
| covid19-las.github.com | Not in the scope | 2026-11-14 |
| covid19-latin.github.com | Not in the scope | 2026-11-14 |
| covid19-lax.github.com | Not in the scope | 2026-11-14 |
| covid19-lax1.github.com | Not in the scope | 2026-11-14 |
| covid19-lb.github.com | Not in the scope | 2026-11-14 |
| covid19-loadbalancer.github.com | Not in the scope | 2026-11-14 |
| covid19-machine.github.com | Not in the scope | 2026-11-14 |
| covid19-mail.github.commail | Not in the scope | 2026-11-14 |
| covid19-march.github.com | Not in the scope | 2026-11-14 |
| covid19-mirror.github.com | Not in the scope | 2026-11-14 |
| covid19-nautilus.github.com | Not in the scope | 2026-11-14 |
| covid19-net.github.com | Not in the scope | 2026-11-14 |
| covid19-nginx.github.com | Not in the scope | 2026-11-14 |
| covid19-node.github.com | Not in the scope | 2026-11-14 |
| covid19-nov.github.com | Not in the scope | 2026-11-14 |
| covid19-ops.github.com | Not in the scope | 2026-11-14 |
| covid19-org.github.com | Not in the scope | 2026-11-14 |
| covid19-page.github.com | Not in the scope | 2026-11-14 |
| covid19-pass.github.com | Not in the scope | 2026-11-14 |
| covid19-pay.github.com | Not in the scope | 2026-11-14 |
| covid19-pc.github.com | Not in the scope | 2026-11-14 |
| covid19-php.github.com | Not in the scope | 2026-11-14 |
| covid19-poland.github.com | Not in the scope | 2026-11-14 |
| covid19-preferences.github.com | Not in the scope | 2026-11-14 |
| covid19-private.github.cominternal | Not in the scope | 2026-11-14 |
| covid19-prod.github.com | Not in the scope | 2026-11-14 |
| covid19-production.github.com | Not in the scope | 2026-11-14 |
| covid19-profile.github.com | Not in the scope | 2026-11-14 |
| covid19-profiles.github.com | Not in the scope | 2026-11-14 |
| covid19-redirector.github.com | Not in the scope | 2026-11-14 |
| covid19-region.github.com | Not in the scope | 2026-11-14 |
| covid19-repo.github.comgit | Not in the scope | 2026-11-14 |
| covid19-restrict.github.com | Not in the scope | 2026-11-14 |
| covid19-restricted.github.com | Not in the scope | 2026-11-14 |
| covid19-reviews.github.com | Not in the scope | 2026-11-14 |
| covid19-s.github.com | Not in the scope | 2026-11-14 |
| covid19-s3.github.comdata | Not in the scope | 2026-11-14 |
| covid19-search.github.com | Not in the scope | 2026-11-14 |
| covid19-secure.github.com | Not in the scope | 2026-11-14 |
| covid19-service.github.com | Not in the scope | 2026-11-14 |
| covid19-singed.github.com | Not in the scope | 2026-11-14 |
| covid19-spring.github.com | Not in the scope | 2026-11-14 |
| covid19-stage.github.comstaging | Not in the scope | 2026-11-14 |
| covid19-stage1.github.comstaging | Not in the scope | 2026-11-14 |
| covid19-staging.github.comstaging | Not in the scope | 2026-11-14 |
| covid19-static.github.com | Not in the scope | 2026-11-14 |
| covid19-swagger.github.comapi | Not in the scope | 2026-11-14 |
| covid19-system.github.com | Not in the scope | 2026-11-14 |
| covid19-t.github.com | Not in the scope | 2026-11-14 |
| covid19-team.github.com | Not in the scope | 2026-11-14 |
| covid19-test.github.comtest | Not in the scope | 2026-11-14 |
0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.