Bug bounty program
EV
Equifax-vdp
Most upvoted reports7
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Important information leaked on Github#649322 | Authentication | 2019-08-22 | – | 98 |
| reflected XSS in [www.equifax.com]#1818163 | Cross-site Scripting | 2023-04-23 | – | 47 |
| Subdomain takeover at http://test.www.midigator.com#1718371 | Access Control | 2022-11-12 | – | 32 |
| Open SonarQube instance leaking internal source code#947946 | Information Disclosure | 2020-09-03 | – | 20 |
| reflected XSS in [www.equifax.com]#1818172 | Cross-site Scripting | 2023-04-23 | – | 19 |
| Information Leak (Github)#694931 | No weakness recorded | 2020-04-09 | – | 17 |
| RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638 | Cross-site Scripting | 2022-03-09 | – | 6 |
Subdomains55,670
| Name | Scope | First seen |
|---|---|---|
| mail.080.github.commail | Not in the scope | 2026-11-14 |
| mail.5278.github.commail | Not in the scope | 2026-11-14 |
| mail.666av.github.commail | Not in the scope | 2026-11-14 |
| mail.77p2p.github.commail | Not in the scope | 2026-11-14 |
| mail.8591.github.commail | Not in the scope | 2026-11-14 |
| mail.85cc.github.commail | Not in the scope | 2026-11-14 |
| mail.85st.github.commail | Not in the scope | 2026-11-14 |
| mail.99.github.commail | Not in the scope | 2026-11-14 |
| webmail.admin.github.comadmin, mail | Not in the scope | 2026-11-14 |
| autodiscover.ads.github.commail | Not in the scope | 2026-11-14 |
| antivirus-mail.github.commail | Not in the scope | 2026-11-14 |
| autodiscover.api.github.comapi, mail | Not in the scope | 2026-11-14 |
| exchange.api.github.comapi, mail | Not in the scope | 2026-11-14 |
| imap.api.github.comapi, mail | Not in the scope | 2026-11-14 |
| mail1.api.github.comapi, mail | Not in the scope | 2026-11-14 |
| mail2.api.github.comapi, mail | Not in the scope | 2026-11-14 |
| owa.api.github.comapi, mail | Not in the scope | 2026-11-14 |
| pop3.api.github.comapi, mail | Not in the scope | 2026-11-14 |
| autodiscover.app.github.commail | Not in the scope | 2026-11-14 |
| autodiscover.archive.github.comlegacy, mail | Not in the scope | 2026-11-14 |
| imap.assets-cdn.github.commail | Not in the scope | 2026-11-14 |
| webmail.assets-cdn.github.commail | Not in the scope | 2026-11-14 |
| autodiscover.github.commail | Not in the scope | 2026-11-14 |
| autodiscover-redirect.github.commail | Not in the scope | 2026-11-14 |
| mail.av8d.github.commail | Not in the scope | 2026-11-14 |
| mail.avcome.github.commail | Not in the scope | 2026-11-14 |
| autodiscover.beta.github.commail, staging | Not in the scope | 2026-11-14 |
| autodiscover.billing.github.commail | Not in the scope | 2026-11-14 |
| autodiscover.blog.github.commail | Not in the scope | 2026-11-14 |
| autodiscover.blogs.github.commail | Not in the scope | 2026-11-14 |
| autodiscover.business.github.commail | Not in the scope | 2026-11-14 |
| autodiscover.cdn.github.commail | Not in the scope | 2026-11-14 |
| mail1.central.github.commail | Not in the scope | 2026-11-14 |
| autodiscover.chat.github.commail | Not in the scope | 2026-11-14 |
| mail.ckarea.github.commail | Not in the scope | 2026-11-14 |
| autodiscover.classifieds.github.commail | Not in the scope | 2026-11-14 |
| autodiscover.classroom.github.commail | Not in the scope | 2026-11-14 |
| exchange.classroom.github.commail | Not in the scope | 2026-11-14 |
| imap.classroom.github.commail | Not in the scope | 2026-11-14 |
| mail.classroom.github.commail | Not in the scope | 2026-11-14 |
| mail1.classroom.github.commail | Not in the scope | 2026-11-14 |
| mx.classroom.github.commail | Not in the scope | 2026-11-14 |
| owa.classroom.github.commail | Not in the scope | 2026-11-14 |
| pop3.classroom.github.commail | Not in the scope | 2026-11-14 |
| webmail.classroom.github.commail | Not in the scope | 2026-11-14 |
| autodiscover.client.github.commail | Not in the scope | 2026-11-14 |
| autodiscover.clients.github.commail | Not in the scope | 2026-11-14 |
| autodiscover.cn.github.commail | Not in the scope | 2026-11-14 |
| mail1.codeload.github.commail | Not in the scope | 2026-11-14 |
| webmail.codeload.github.commail | Not in the scope | 2026-11-14 |
| mail.collector.github.commail | Not in the scope | 2026-11-14 |
| webmail.control.github.commail | Not in the scope | 2026-11-14 |
| webmail.controlpanel.github.commail | Not in the scope | 2026-11-14 |
| mail.corp.github.cominternal, mail | Not in the scope | 2026-11-14 |
| covid19-mail.github.commail | Not in the scope | 2026-11-14 |
| mail.covid19.github.commail | Not in the scope | 2026-11-14 |
| covid19mail.github.commail | Not in the scope | 2026-11-14 |
| webmail.cp.github.commail | Not in the scope | 2026-11-14 |
| webmail.cpanel.github.comadmin, mail | Not in the scope | 2026-11-14 |
| autodiscover.crm.github.commail | Not in the scope | 2026-11-14 |
| mx.cs.github.commail | Not in the scope | 2026-11-14 |
| autodiscover.de.github.commail | Not in the scope | 2026-11-14 |
| mail.de.github.commail | Not in the scope | 2026-11-14 |
| autodiscover.demo.github.commail, test | Not in the scope | 2026-11-14 |
| mail.demo.github.commail, test | Not in the scope | 2026-11-14 |
| webmail.demo.github.commail, test | Not in the scope | 2026-11-14 |
| autodiscover.design.github.commail | Not in the scope | 2026-11-14 |
| autodiscover.dev.github.comdev, mail | Not in the scope | 2026-11-14 |
| mail.dev.github.comdev, mail | Not in the scope | 2026-11-14 |
| autodiscover.dev2.github.comdev, mail | Not in the scope | 2026-11-14 |
| autodiscover.director.github.commail | Not in the scope | 2026-11-14 |
| autodiscover.directory.github.commail | Not in the scope | 2026-11-14 |
| mail2.docs.github.commail | Not in the scope | 2026-11-14 |
| autodiscover.download.github.commail | Not in the scope | 2026-11-14 |
| autodiscover.drvinceknight.github.commail | Not in the scope | 2026-11-14 |
| imap.drvinceknight.github.commail | Not in the scope | 2026-11-14 |
| mail.drvinceknight.github.commail | Not in the scope | 2026-11-14 |
| mail2.drvinceknight.github.commail | Not in the scope | 2026-11-14 |
| mx.drvinceknight.github.commail | Not in the scope | 2026-11-14 |
| pop3.drvinceknight.github.commail | Not in the scope | 2026-11-14 |
| smtp.drvinceknight.github.commail | Not in the scope | 2026-11-14 |
| webmail.drvinceknight.github.commail | Not in the scope | 2026-11-14 |
| e-mail.github.commail | Not in the scope | 2026-11-14 |
| autodiscover.education.github.commail | Not in the scope | 2026-11-14 |
| exchange.education.github.commail | Not in the scope | 2026-11-14 |
| imap.education.github.commail | Not in the scope | 2026-11-14 |
| mail.education.github.commail | Not in the scope | 2026-11-14 |
| mail2.education.github.commail | Not in the scope | 2026-11-14 |
| mx.education.github.commail | Not in the scope | 2026-11-14 |
| smtp.education.github.commail | Not in the scope | 2026-11-14 |
| webmail.education.github.commail | Not in the scope | 2026-11-14 |
| autodiscover.email.github.commail | Not in the scope | 2026-11-14 |
| autodiscover.en.github.commail | Not in the scope | 2026-11-14 |
| autodiscover.es.github.commail | Not in the scope | 2026-11-14 |
| exchange01.github.commail | Not in the scope | 2026-11-14 |
| exchange1.github.commail | Not in the scope | 2026-11-14 |
| exchange2.github.commail | Not in the scope | 2026-11-14 |
| mail.eyny.github.commail | Not in the scope | 2026-11-14 |
| autodiscover.facebook.github.commail | Not in the scope | 2026-11-14 |
| autodiscover.fb.github.commail | Not in the scope | 2026-11-14 |
0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.