Bug bounty program
EV
Equifax-vdp
Most upvoted reports7
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Important information leaked on Github#649322 | Authentication | 2019-08-22 | – | 98 |
| reflected XSS in [www.equifax.com]#1818163 | Cross-site Scripting | 2023-04-23 | – | 47 |
| Subdomain takeover at http://test.www.midigator.com#1718371 | Access Control | 2022-11-12 | – | 32 |
| Open SonarQube instance leaking internal source code#947946 | Information Disclosure | 2020-09-03 | – | 20 |
| reflected XSS in [www.equifax.com]#1818172 | Cross-site Scripting | 2023-04-23 | – | 19 |
| Information Leak (Github)#694931 | No weakness recorded | 2020-04-09 | – | 17 |
| RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638 | Cross-site Scripting | 2022-03-09 | – | 6 |
Subdomains55,670
| Name | Scope | First seen |
|---|---|---|
| ci.antivirus.github.comci | Not in the scope | 2026-11-14 |
| jenkins.antivirus.github.comci | Not in the scope | 2026-11-14 |
| jenkins.api.github.comapi, ci | Not in the scope | 2026-11-14 |
| argo.github.comci | Not in the scope | 2026-11-14 |
| ci.assets-cdn.github.comci | Not in the scope | 2026-11-14 |
| bamboo.github.comci | Not in the scope | 2026-11-14 |
| build.github.comci | Not in the scope | 2026-11-14 |
| www.build.github.comci | Not in the scope | 2026-11-14 |
| ci.github.comci | Not in the scope | 2026-11-14 |
| ci-covid19.github.comci | Not in the scope | 2026-11-14 |
| ci-virus.github.comci | Not in the scope | 2026-11-14 |
| antivirus.ci.github.comci | Not in the scope | 2026-11-14 |
| covid19.ci.github.comci | Not in the scope | 2026-11-14 |
| sigmavirus24.ci.github.comci | Not in the scope | 2026-11-14 |
| www.ci.github.comci | Not in the scope | 2026-11-14 |
| ci.classroom.github.comci | Not in the scope | 2026-11-14 |
| covid19-ci.github.comci | Not in the scope | 2026-11-14 |
| covid19-jenkins.github.comci | Not in the scope | 2026-11-14 |
| jenkins.covid19.github.comci | Not in the scope | 2026-11-14 |
| covid19jenkins.github.comci | Not in the scope | 2026-11-14 |
| ci.education.github.comci | Not in the scope | 2026-11-14 |
| build.git.github.comci, git | Not in the scope | 2026-11-14 |
| ci.github.github.comci, git | Not in the scope | 2026-11-14 |
| hibernate-ci.github.comci | Not in the scope | 2026-11-14 |
| ed25519.hibernate-ci.github.comci | Not in the scope | 2026-11-14 |
| username-and-token.hibernate-ci.github.comci | Not in the scope | 2026-11-14 |
| jenkins.jakeswenson.github.comci | Not in the scope | 2026-11-14 |
| jenkins.github.comci | Not in the scope | 2026-11-14 |
| jenkins-antivirus.github.comci | Not in the scope | 2026-11-14 |
| jenkins-khan.github.comci | Not in the scope | 2026-11-14 |
| jenkins-le-guide-complet.github.comci | Not in the scope | 2026-11-14 |
| jenkins-scikit-learn.github.comci | Not in the scope | 2026-11-14 |
| antivirus.jenkins.github.comci | Not in the scope | 2026-11-14 |
| covid19.jenkins.github.comci | Not in the scope | 2026-11-14 |
| sigmavirus24.jenkins.github.comci | Not in the scope | 2026-11-14 |
| virus.jenkins.github.comci | Not in the scope | 2026-11-14 |
| jenkins.jenkinsoperator.maratoid.github.comci | Not in the scope | 2026-11-14 |
| jenkinsinstances.jenkins.jenkinsoperator.maratoid.github.comci | Not in the scope | 2026-11-14 |
| jenkinsjobs.jenkins.jenkinsoperator.maratoid.github.comci | Not in the scope | 2026-11-14 |
| new-bamboo.github.comci | Not in the scope | 2026-11-14 |
| argocd.nyl.niklasrosenstein.github.comci | Not in the scope | 2026-11-14 |
| openstack-ci.github.comci | Not in the scope | 2026-11-14 |
| jenkins.salemelrahale-complet.github.comci | Not in the scope | 2026-11-14 |
| jenkins.jenkinsoperator.samsung-cnct.github.comci | Not in the scope | 2026-11-14 |
| jenkinsinstances.jenkins.jenkinsoperator.samsung-cnct.github.comci | Not in the scope | 2026-11-14 |
| build.secure.github.comci | Not in the scope | 2026-11-14 |
| jenkins.sigmavirus24.github.comci | Not in the scope | 2026-11-14 |
| docker-ci-scanner.token-only.github.comci, tools | Not in the scope | 2026-11-14 |
| docker-jenkins.token.github.comci, tools | Not in the scope | 2026-11-14 |
| travis.github.comci | Not in the scope | 2026-11-14 |
| travis-ci.github.comci | Not in the scope | 2026-11-14 |
| virus-ci.github.comci | Not in the scope | 2026-11-14 |
| build.www.github.comci | Not in the scope | 2026-11-14 |
| build-lohika.www.github.comci | Not in the scope | 2026-11-14 |
0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.