Skip to content
Connect AISign inSign up free

Bug bounty program

EV

Equifax-vdp

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670
Vendor on CyberSIXT
Equifax (1 CVE, 0 exploited)

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.comAnalysed#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source code#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Root:github.com
Scope
Name suggests
First seen
Text fileClear filters55,670 names
Subdomains of Equifax-vdp
NameScopeFirst seen
hwcdn.covid19.github.comNot in the scope2026-11-14
ids.covid19.github.comNot in the scope2026-11-14
internal.covid19.github.cominternalNot in the scope2026-11-14
jenkins.covid19.github.comciNot in the scope2026-11-14
jinx.covid19.github.comNot in the scope2026-11-14
july.covid19.github.comNot in the scope2026-11-14
june.covid19.github.comNot in the scope2026-11-14
kor.covid19.github.comNot in the scope2026-11-14
korea.covid19.github.comNot in the scope2026-11-14
kr.covid19.github.comNot in the scope2026-11-14
lan.covid19.github.comNot in the scope2026-11-14
las.covid19.github.comNot in the scope2026-11-14
latinamerica.covid19.github.comNot in the scope2026-11-14
lax1.covid19.github.comNot in the scope2026-11-14
lb.covid19.github.comNot in the scope2026-11-14
loadbalancer.covid19.github.comNot in the scope2026-11-14
machine.covid19.github.comNot in the scope2026-11-14
mail.covid19.github.commailNot in the scope2026-11-14
march.covid19.github.comNot in the scope2026-11-14
merch.covid19.github.comNot in the scope2026-11-14
mirror.covid19.github.comNot in the scope2026-11-14
na.covid19.github.comNot in the scope2026-11-14
nautilus.covid19.github.comNot in the scope2026-11-14
net.covid19.github.comNot in the scope2026-11-14
netherlands.covid19.github.comNot in the scope2026-11-14
nginx.covid19.github.comNot in the scope2026-11-14
nl.covid19.github.comNot in the scope2026-11-14
node.covid19.github.comNot in the scope2026-11-14
northamerica.covid19.github.comNot in the scope2026-11-14
nov.covid19.github.comNot in the scope2026-11-14
oct.covid19.github.comNot in the scope2026-11-14
ops.covid19.github.comNot in the scope2026-11-14
org.covid19.github.comNot in the scope2026-11-14
origin.covid19.github.comNot in the scope2026-11-14
page.covid19.github.comNot in the scope2026-11-14
pantheon.covid19.github.comNot in the scope2026-11-14
pass.covid19.github.comNot in the scope2026-11-14
pay.covid19.github.comNot in the scope2026-11-14
payment.covid19.github.comNot in the scope2026-11-14
pc.covid19.github.comNot in the scope2026-11-14
php.covid19.github.comNot in the scope2026-11-14
preferences.covid19.github.comNot in the scope2026-11-14
priv.covid19.github.comNot in the scope2026-11-14
prod.covid19.github.comNot in the scope2026-11-14
production.covid19.github.comNot in the scope2026-11-14
profile.covid19.github.comNot in the scope2026-11-14
profiles.covid19.github.comNot in the scope2026-11-14
promo.covid19.github.comNot in the scope2026-11-14
promotion.covid19.github.comNot in the scope2026-11-14
proxy.covid19.github.comNot in the scope2026-11-14
redirector.covid19.github.comNot in the scope2026-11-14
reset.covid19.github.comNot in the scope2026-11-14
restrict.covid19.github.comNot in the scope2026-11-14
reviews.covid19.github.comNot in the scope2026-11-14
s.covid19.github.comNot in the scope2026-11-14
s3.covid19.github.comdataNot in the scope2026-11-14
sandbox.covid19.github.comtestNot in the scope2026-11-14
search.covid19.github.comNot in the scope2026-11-14
secure.covid19.github.comNot in the scope2026-11-14
security.covid19.github.comNot in the scope2026-11-14
sept.covid19.github.comNot in the scope2026-11-14
server.covid19.github.comNot in the scope2026-11-14
service.covid19.github.comNot in the scope2026-11-14
singed.covid19.github.comNot in the scope2026-11-14
ssl.covid19.github.comNot in the scope2026-11-14
staff.covid19.github.cominternalNot in the scope2026-11-14
stage.covid19.github.comstagingNot in the scope2026-11-14
staging.covid19.github.comstagingNot in the scope2026-11-14
static.covid19.github.comNot in the scope2026-11-14
support.covid19.github.comNot in the scope2026-11-14
swagger.covid19.github.comapiNot in the scope2026-11-14
system.covid19.github.comNot in the scope2026-11-14
t.covid19.github.comNot in the scope2026-11-14
team.covid19.github.comNot in the scope2026-11-14
test.covid19.github.comtestNot in the scope2026-11-14
test1.covid19.github.comtestNot in the scope2026-11-14
testbed.covid19.github.comNot in the scope2026-11-14
testing.covid19.github.comtestNot in the scope2026-11-14
testing1.covid19.github.comtestNot in the scope2026-11-14
tomcat.covid19.github.comNot in the scope2026-11-14
tpe.covid19.github.comNot in the scope2026-11-14
tr.covid19.github.comNot in the scope2026-11-14
tur.covid19.github.comNot in the scope2026-11-14
turk.covid19.github.comNot in the scope2026-11-14
twitch.covid19.github.comNot in the scope2026-11-14
uat.covid19.github.comtestNot in the scope2026-11-14
v1.covid19.github.comNot in the scope2026-11-14
v2.covid19.github.comNot in the scope2026-11-14
vi.covid19.github.comNot in the scope2026-11-14
vpn.covid19.github.comvpnNot in the scope2026-11-14
w3.covid19.github.comNot in the scope2026-11-14
web.covid19.github.comNot in the scope2026-11-14
web1.covid19.github.comNot in the scope2026-11-14
webapp.covid19.github.comNot in the scope2026-11-14
westeurope.covid19.github.comNot in the scope2026-11-14
z.covid19.github.comNot in the scope2026-11-14
covid191.github.comNot in the scope2026-11-14
covid1910.github.comNot in the scope2026-11-14
covid1911.github.comNot in the scope2026-11-14
covid1914.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated