Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670
Vendor on CyberSIXT
Equifax (1 CVE, 0 exploited)

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.comAnalysed#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source code#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Subdomains of Equifax-vdp
NameScopeFirst seen
covid19-api-docs.github.comapiNot in the scope2026-11-14
covid19-api1.github.comapiNot in the scope2026-11-14
covid19-apollo.github.comNot in the scope2026-11-14
covid19-aws.github.comNot in the scope2026-11-14
covid19-backend.github.comNot in the scope2026-11-14
covid19-box.github.comNot in the scope2026-11-14
covid19-brand.github.comNot in the scope2026-11-14
covid19-brasil.github.comNot in the scope2026-11-14
covid19-c.github.comNot in the scope2026-11-14
covid19-cf.github.comNot in the scope2026-11-14
covid19-ci.github.comciNot in the scope2026-11-14
covid19-client.github.comNot in the scope2026-11-14
covid19-cms.github.comadminNot in the scope2026-11-14
covid19-com.github.comNot in the scope2026-11-14
covid19-confluence.github.comtoolsNot in the scope2026-11-14
covid19-container.github.comNot in the scope2026-11-14
covid19-control.github.comNot in the scope2026-11-14
covid19-data.github.comNot in the scope2026-11-14
covid19-dec.github.comNot in the scope2026-11-14
covid19-dev.github.comdevNot in the scope2026-11-14
covid19-dev1.github.comdevNot in the scope2026-11-14
covid19-docker.github.comtoolsNot in the scope2026-11-14
covid19-drop.github.comNot in the scope2026-11-14
covid19-elasticbeanstalk.github.comNot in the scope2026-11-14
covid19-elb.github.comNot in the scope2026-11-14
covid19-engine.github.comNot in the scope2026-11-14
covid19-europe.github.comNot in the scope2026-11-14
covid19-euwe.github.comNot in the scope2026-11-14
covid19-evelynn.github.comNot in the scope2026-11-14
covid19-events.github.comNot in the scope2026-11-14
covid19-firewall.github.comNot in the scope2026-11-14
covid19-forum.github.comNot in the scope2026-11-14
covid19-frontpage.github.comNot in the scope2026-11-14
covid19-fw.github.comNot in the scope2026-11-14
covid19-gh.github.comNot in the scope2026-11-14
covid19-ghcpi.github.comNot in the scope2026-11-14
covid19-github.github.comgitNot in the scope2026-11-14
covid19-global.github.comNot in the scope2026-11-14
covid19-hw.github.comNot in the scope2026-11-14
covid19-hwcdn.github.comNot in the scope2026-11-14
covid19-ids.github.comNot in the scope2026-11-14
covid19-int.github.comNot in the scope2026-11-14
covid19-jenkins.github.comciNot in the scope2026-11-14
covid19-jinx.github.comNot in the scope2026-11-14
covid19-july.github.comNot in the scope2026-11-14
covid19-june.github.comNot in the scope2026-11-14
covid19-korea.github.comNot in the scope2026-11-14
covid19-kr.github.comNot in the scope2026-11-14
covid19-lan.github.comNot in the scope2026-11-14
covid19-las.github.comNot in the scope2026-11-14
covid19-latin.github.comNot in the scope2026-11-14
covid19-lax.github.comNot in the scope2026-11-14
covid19-lax1.github.comNot in the scope2026-11-14
covid19-lb.github.comNot in the scope2026-11-14
covid19-loadbalancer.github.comNot in the scope2026-11-14
covid19-machine.github.comNot in the scope2026-11-14
covid19-mail.github.commailNot in the scope2026-11-14
covid19-march.github.comNot in the scope2026-11-14
covid19-mirror.github.comNot in the scope2026-11-14
covid19-nautilus.github.comNot in the scope2026-11-14
covid19-net.github.comNot in the scope2026-11-14
covid19-nginx.github.comNot in the scope2026-11-14
covid19-node.github.comNot in the scope2026-11-14
covid19-nov.github.comNot in the scope2026-11-14
covid19-ops.github.comNot in the scope2026-11-14
covid19-org.github.comNot in the scope2026-11-14
covid19-page.github.comNot in the scope2026-11-14
covid19-pass.github.comNot in the scope2026-11-14
covid19-pay.github.comNot in the scope2026-11-14
covid19-pc.github.comNot in the scope2026-11-14
covid19-php.github.comNot in the scope2026-11-14
covid19-poland.github.comNot in the scope2026-11-14
covid19-preferences.github.comNot in the scope2026-11-14
covid19-private.github.cominternalNot in the scope2026-11-14
covid19-prod.github.comNot in the scope2026-11-14
covid19-production.github.comNot in the scope2026-11-14
covid19-profile.github.comNot in the scope2026-11-14
covid19-profiles.github.comNot in the scope2026-11-14
covid19-redirector.github.comNot in the scope2026-11-14
covid19-region.github.comNot in the scope2026-11-14
covid19-repo.github.comgitNot in the scope2026-11-14
covid19-restrict.github.comNot in the scope2026-11-14
covid19-restricted.github.comNot in the scope2026-11-14
covid19-reviews.github.comNot in the scope2026-11-14
covid19-s.github.comNot in the scope2026-11-14
covid19-s3.github.comdataNot in the scope2026-11-14
covid19-search.github.comNot in the scope2026-11-14
covid19-secure.github.comNot in the scope2026-11-14
covid19-service.github.comNot in the scope2026-11-14
covid19-singed.github.comNot in the scope2026-11-14
covid19-spring.github.comNot in the scope2026-11-14
covid19-stage.github.comstagingNot in the scope2026-11-14
covid19-stage1.github.comstagingNot in the scope2026-11-14
covid19-staging.github.comstagingNot in the scope2026-11-14
covid19-static.github.comNot in the scope2026-11-14
covid19-swagger.github.comapiNot in the scope2026-11-14
covid19-system.github.comNot in the scope2026-11-14
covid19-t.github.comNot in the scope2026-11-14
covid19-team.github.comNot in the scope2026-11-14
covid19-test.github.comtestNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.