Bug bounty program
EV
Equifax-vdp
Most upvoted reports7
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Important information leaked on Github#649322 | Authentication | 2019-08-22 | – | 98 |
| reflected XSS in [www.equifax.com]#1818163 | Cross-site Scripting | 2023-04-23 | – | 47 |
| Subdomain takeover at http://test.www.midigator.com#1718371 | Access Control | 2022-11-12 | – | 32 |
| Open SonarQube instance leaking internal source code#947946 | Information Disclosure | 2020-09-03 | – | 20 |
| reflected XSS in [www.equifax.com]#1818172 | Cross-site Scripting | 2023-04-23 | – | 19 |
| Information Leak (Github)#694931 | No weakness recorded | 2020-04-09 | – | 17 |
| RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638 | Cross-site Scripting | 2022-03-09 | – | 6 |
Subdomains55,670
| Name | Scope | First seen |
|---|---|---|
| test.actions-gateway.github.comtest | Not in the scope | 2026-11-14 |
| akamai-test.github.comtest | Not in the scope | 2026-11-14 |
| akamai-test-origin.github.comtest | Not in the scope | 2026-11-14 |
| ambry-test1.github.comtest | Not in the scope | 2026-11-14 |
| demo.antivirus.github.comtest | Not in the scope | 2026-11-14 |
| sandbox.antivirus.github.comtest | Not in the scope | 2026-11-14 |
| test.antivirus.github.comtest | Not in the scope | 2026-11-14 |
| test1.antivirus.github.comtest | Not in the scope | 2026-11-14 |
| testing.antivirus.github.comtest | Not in the scope | 2026-11-14 |
| testing1.antivirus.github.comtest | Not in the scope | 2026-11-14 |
| api-test.github.comapi, test | Not in the scope | 2026-11-14 |
| akamai-test.api.github.comapi, test | Not in the scope | 2026-11-14 |
| cim-api-qa.api.github.comapi, test | Not in the scope | 2026-11-14 |
| cim-api-uat.api.github.comapi, test | Not in the scope | 2026-11-14 |
| cim-data-quality-qa.api.github.comapi, test | Not in the scope | 2026-11-14 |
| gws-api-sandbox.api.github.comapi, test | Not in the scope | 2026-11-14 |
| gws-qa.api.github.comapi, test | Not in the scope | 2026-11-14 |
| gws-rds-external-readonly-uat.api.github.comapi, test | Not in the scope | 2026-11-14 |
| repos.test.credentials.app.scopes.api.github.comapi, git, test | Not in the scope | 2026-11-14 |
| searchportal-qa.api.github.comapi, test | Not in the scope | 2026-11-14 |
| test.api.github.comapi, test | Not in the scope | 2026-11-14 |
| demo.assets-cdn.github.comtest | Not in the scope | 2026-11-14 |
| cim-api-qa.github.comapi, test | Not in the scope | 2026-11-14 |
| cim-api-uat.github.comapi, test | Not in the scope | 2026-11-14 |
| cim-data-quality-qa.github.comtest | Not in the scope | 2026-11-14 |
| cim-qa.github.comtest | Not in the scope | 2026-11-14 |
| cim-service-qa.github.comtest | Not in the scope | 2026-11-14 |
| cim-service-uat.github.comtest | Not in the scope | 2026-11-14 |
| cim-uat.github.comtest | Not in the scope | 2026-11-14 |
| akamai-test.classroom.github.comtest | Not in the scope | 2026-11-14 |
| cim-data-quality-qa.classroom.github.comtest | Not in the scope | 2026-11-14 |
| gcom-product-find-qa.classroom.github.comtest | Not in the scope | 2026-11-14 |
| gws-api-sandbox.classroom.github.comapi, test | Not in the scope | 2026-11-14 |
| gws-rds-external-readonly-uat.classroom.github.comtest | Not in the scope | 2026-11-14 |
| searchportal-qa.classroom.github.comtest | Not in the scope | 2026-11-14 |
| test.classroom.github.comtest | Not in the scope | 2026-11-14 |
| demo.codeload.github.comtest | Not in the scope | 2026-11-14 |
| demo.collector.github.comtest | Not in the scope | 2026-11-14 |
| covid19-test.github.comtest | Not in the scope | 2026-11-14 |
| covid19-test1.github.comtest | Not in the scope | 2026-11-14 |
| covid19-testing.github.comtest | Not in the scope | 2026-11-14 |
| covid19-testing1.github.comtest | Not in the scope | 2026-11-14 |
| sandbox.covid19.github.comtest | Not in the scope | 2026-11-14 |
| test.covid19.github.comtest | Not in the scope | 2026-11-14 |
| test1.covid19.github.comtest | Not in the scope | 2026-11-14 |
| testing.covid19.github.comtest | Not in the scope | 2026-11-14 |
| testing1.covid19.github.comtest | Not in the scope | 2026-11-14 |
| uat.covid19.github.comtest | Not in the scope | 2026-11-14 |
| covid19test1.github.comtest | Not in the scope | 2026-11-14 |
| covid19testing1.github.comtest | Not in the scope | 2026-11-14 |
| go-safeclient-tests80.cretz.github.comtest | Not in the scope | 2026-11-14 |
| safeclient.js-tests.cretz.github.comtest | Not in the scope | 2026-11-14 |
| demo.github.comtest | Not in the scope | 2026-11-14 |
| demo-antivirus.github.comtest | Not in the scope | 2026-11-14 |
| demo-covid19.github.comtest | Not in the scope | 2026-11-14 |
| autoconfig.demo.github.comtest | Not in the scope | 2026-11-14 |
| autodiscover.demo.github.commail, test | Not in the scope | 2026-11-14 |
| covid19.demo.github.comtest | Not in the scope | 2026-11-14 |
| ftp.demo.github.comdata, test | Not in the scope | 2026-11-14 |
| ipv4.demo.github.comtest | Not in the scope | 2026-11-14 |
| m.demo.github.comtest | Not in the scope | 2026-11-14 |
| mail.demo.github.commail, test | Not in the scope | 2026-11-14 |
| ns.demo.github.comtest | Not in the scope | 2026-11-14 |
| sigmavirus24.demo.github.comtest | Not in the scope | 2026-11-14 |
| virus.demo.github.comtest | Not in the scope | 2026-11-14 |
| webdisk.demo.github.comtest | Not in the scope | 2026-11-14 |
| webmail.demo.github.commail, test | Not in the scope | 2026-11-14 |
| www.demo.github.comtest | Not in the scope | 2026-11-14 |
| demo01.github.comtest | Not in the scope | 2026-11-14 |
| demo02.github.comtest | Not in the scope | 2026-11-14 |
| www.demo1.github.comtest | Not in the scope | 2026-11-14 |
| demo10.github.comtest | Not in the scope | 2026-11-14 |
| demo11.github.comtest | Not in the scope | 2026-11-14 |
| demo12.github.comtest | Not in the scope | 2026-11-14 |
| demo13.github.comtest | Not in the scope | 2026-11-14 |
| demo14.github.comtest | Not in the scope | 2026-11-14 |
| demo15.github.comtest | Not in the scope | 2026-11-14 |
| demo16.github.comtest | Not in the scope | 2026-11-14 |
| demo17.github.comtest | Not in the scope | 2026-11-14 |
| demo18.github.comtest | Not in the scope | 2026-11-14 |
| demo19.github.comtest | Not in the scope | 2026-11-14 |
| demo2.github.comtest | Not in the scope | 2026-11-14 |
| www.demo2.github.comtest | Not in the scope | 2026-11-14 |
| demo20.github.comtest | Not in the scope | 2026-11-14 |
| demo21.github.comtest | Not in the scope | 2026-11-14 |
| demo3.github.comtest | Not in the scope | 2026-11-14 |
| www.demo3.github.comtest | Not in the scope | 2026-11-14 |
| demo4.github.comtest | Not in the scope | 2026-11-14 |
| demo5.github.comtest | Not in the scope | 2026-11-14 |
| demo6.github.comtest | Not in the scope | 2026-11-14 |
| demo7.github.comtest | Not in the scope | 2026-11-14 |
| demo8.github.comtest | Not in the scope | 2026-11-14 |
| demo9.github.comtest | Not in the scope | 2026-11-14 |
| test.dnsx.github.comtest | Not in the scope | 2026-11-14 |
| demo.drvinceknight.github.comtest | Not in the scope | 2026-11-14 |
| test.drvinceknight.github.comtest | Not in the scope | 2026-11-14 |
| akamai-test.education.github.comtest | Not in the scope | 2026-11-14 |
| akamai-test-origin.education.github.comtest | Not in the scope | 2026-11-14 |
| cim-api-qa.education.github.comapi, test | Not in the scope | 2026-11-14 |
| cim-data-quality-qa.education.github.comtest | Not in the scope | 2026-11-14 |
0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.