Bug bounty program
EV
Equifax-vdp
Most upvoted reports7
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Important information leaked on GithubAnalysed#649322 | Authentication | 2019-08-22 | – | 98 |
| reflected XSS in [www.equifax.com]Analysed#1818163 | Cross-site Scripting | 2023-04-23 | – | 47 |
| Subdomain takeover at http://test.www.midigator.comAnalysed#1718371 | Access Control | 2022-11-12 | – | 32 |
| Open SonarQube instance leaking internal source code#947946 | Information Disclosure | 2020-09-03 | – | 20 |
| reflected XSS in [www.equifax.com]#1818172 | Cross-site Scripting | 2023-04-23 | – | 19 |
| Information Leak (Github)#694931 | No weakness recorded | 2020-04-09 | – | 17 |
| RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638 | Cross-site Scripting | 2022-03-09 | – | 6 |
Subdomains55,670
| Name | Scope | First seen |
|---|---|---|
| covid19-test1.github.comtest | Not in the scope | 2026-11-14 |
| covid19-testbed.github.com | Not in the scope | 2026-11-14 |
| covid19-testing.github.comtest | Not in the scope | 2026-11-14 |
| covid19-testing1.github.comtest | Not in the scope | 2026-11-14 |
| covid19-tr.github.com | Not in the scope | 2026-11-14 |
| covid19-trial.github.com | Not in the scope | 2026-11-14 |
| covid19-turk.github.com | Not in the scope | 2026-11-14 |
| covid19-v1.github.com | Not in the scope | 2026-11-14 |
| covid19-v2.github.com | Not in the scope | 2026-11-14 |
| covid19-w3.github.com | Not in the scope | 2026-11-14 |
| covid19-web.github.com | Not in the scope | 2026-11-14 |
| covid19-web1.github.com | Not in the scope | 2026-11-14 |
| covid19-webapp.github.com | Not in the scope | 2026-11-14 |
| covid19-z.github.com | Not in the scope | 2026-11-14 |
| 1.covid19.github.com | Not in the scope | 2026-11-14 |
| 12.covid19.github.com | Not in the scope | 2026-11-14 |
| 13.covid19.github.com | Not in the scope | 2026-11-14 |
| 14.covid19.github.com | Not in the scope | 2026-11-14 |
| 15.covid19.github.com | Not in the scope | 2026-11-14 |
| 16.covid19.github.com | Not in the scope | 2026-11-14 |
| 17.covid19.github.com | Not in the scope | 2026-11-14 |
| 18.covid19.github.com | Not in the scope | 2026-11-14 |
| 19.covid19.github.com | Not in the scope | 2026-11-14 |
| 2.covid19.github.com | Not in the scope | 2026-11-14 |
| 20.covid19.github.com | Not in the scope | 2026-11-14 |
| 2009.covid19.github.com | Not in the scope | 2026-11-14 |
| 2010.covid19.github.com | Not in the scope | 2026-11-14 |
| 2011.covid19.github.com | Not in the scope | 2026-11-14 |
| 2012.covid19.github.com | Not in the scope | 2026-11-14 |
| 2014.covid19.github.com | Not in the scope | 2026-11-14 |
| 2015.covid19.github.com | Not in the scope | 2026-11-14 |
| 4.covid19.github.com | Not in the scope | 2026-11-14 |
| 5.covid19.github.com | Not in the scope | 2026-11-14 |
| 6.covid19.github.com | Not in the scope | 2026-11-14 |
| 7.covid19.github.com | Not in the scope | 2026-11-14 |
| 8.covid19.github.com | Not in the scope | 2026-11-14 |
| 9.covid19.github.com | Not in the scope | 2026-11-14 |
| acc.covid19.github.com | Not in the scope | 2026-11-14 |
| accounts.covid19.github.com | Not in the scope | 2026-11-14 |
| admin.covid19.github.comadmin | Not in the scope | 2026-11-14 |
| admin1.covid19.github.comadmin | Not in the scope | 2026-11-14 |
| administrator.covid19.github.comadmin | Not in the scope | 2026-11-14 |
| akali.covid19.github.com | Not in the scope | 2026-11-14 |
| alpha.covid19.github.comstaging | Not in the scope | 2026-11-14 |
| analytics.covid19.github.com | Not in the scope | 2026-11-14 |
| api.covid19.github.comapi | Not in the scope | 2026-11-14 |
| apollo.covid19.github.com | Not in the scope | 2026-11-14 |
| april.covid19.github.com | Not in the scope | 2026-11-14 |
| aws.covid19.github.com | Not in the scope | 2026-11-14 |
| b.covid19.github.com | Not in the scope | 2026-11-14 |
| backend.covid19.github.com | Not in the scope | 2026-11-14 |
| beta.covid19.github.comstaging | Not in the scope | 2026-11-14 |
| billing.covid19.github.com | Not in the scope | 2026-11-14 |
| boards.covid19.github.com | Not in the scope | 2026-11-14 |
| brand.covid19.github.com | Not in the scope | 2026-11-14 |
| brasil.covid19.github.com | Not in the scope | 2026-11-14 |
| brazil.covid19.github.com | Not in the scope | 2026-11-14 |
| bucket.covid19.github.comdata | Not in the scope | 2026-11-14 |
| c.covid19.github.com | Not in the scope | 2026-11-14 |
| cdn.covid19.github.com | Not in the scope | 2026-11-14 |
| cf.covid19.github.com | Not in the scope | 2026-11-14 |
| chef.covid19.github.com | Not in the scope | 2026-11-14 |
| client.covid19.github.com | Not in the scope | 2026-11-14 |
| cloudfront.covid19.github.com | Not in the scope | 2026-11-14 |
| cms.covid19.github.comadmin | Not in the scope | 2026-11-14 |
| cn.covid19.github.com | Not in the scope | 2026-11-14 |
| com.covid19.github.com | Not in the scope | 2026-11-14 |
| confluence.covid19.github.comtools | Not in the scope | 2026-11-14 |
| container.covid19.github.com | Not in the scope | 2026-11-14 |
| control.covid19.github.com | Not in the scope | 2026-11-14 |
| data.covid19.github.com | Not in the scope | 2026-11-14 |
| dev.covid19.github.comdev | Not in the scope | 2026-11-14 |
| dev1.covid19.github.comdev | Not in the scope | 2026-11-14 |
| developer.covid19.github.com | Not in the scope | 2026-11-14 |
| docker.covid19.github.comtools | Not in the scope | 2026-11-14 |
| docs.covid19.github.com | Not in the scope | 2026-11-14 |
| drop.covid19.github.com | Not in the scope | 2026-11-14 |
| elasticbeanstalk.covid19.github.com | Not in the scope | 2026-11-14 |
| elb.covid19.github.com | Not in the scope | 2026-11-14 |
| email.covid19.github.com | Not in the scope | 2026-11-14 |
| engine.covid19.github.com | Not in the scope | 2026-11-14 |
| engineering.covid19.github.com | Not in the scope | 2026-11-14 |
| eu.covid19.github.com | Not in the scope | 2026-11-14 |
| europewest.covid19.github.com | Not in the scope | 2026-11-14 |
| euw.covid19.github.com | Not in the scope | 2026-11-14 |
| euwe.covid19.github.com | Not in the scope | 2026-11-14 |
| evelynn.covid19.github.com | Not in the scope | 2026-11-14 |
| feb.covid19.github.com | Not in the scope | 2026-11-14 |
| firewall.covid19.github.com | Not in the scope | 2026-11-14 |
| forms.covid19.github.com | Not in the scope | 2026-11-14 |
| forum.covid19.github.com | Not in the scope | 2026-11-14 |
| frontpage.covid19.github.com | Not in the scope | 2026-11-14 |
| fw.covid19.github.com | Not in the scope | 2026-11-14 |
| germany.covid19.github.com | Not in the scope | 2026-11-14 |
| gh.covid19.github.com | Not in the scope | 2026-11-14 |
| ghcpi.covid19.github.com | Not in the scope | 2026-11-14 |
| github.covid19.github.comgit | Not in the scope | 2026-11-14 |
| global.covid19.github.com | Not in the scope | 2026-11-14 |
| hkg.covid19.github.com | Not in the scope | 2026-11-14 |
| hw.covid19.github.com | Not in the scope | 2026-11-14 |
0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.