Bug bounty program
EV
Equifax-vdp
Most upvoted reports7
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Important information leaked on Github#649322 | Authentication | 2019-08-22 | – | 98 |
| reflected XSS in [www.equifax.com]#1818163 | Cross-site Scripting | 2023-04-23 | – | 47 |
| Subdomain takeover at http://test.www.midigator.com#1718371 | Access Control | 2022-11-12 | – | 32 |
| Open SonarQube instance leaking internal source code#947946 | Information Disclosure | 2020-09-03 | – | 20 |
| reflected XSS in [www.equifax.com]#1818172 | Cross-site Scripting | 2023-04-23 | – | 19 |
| Information Leak (Github)#694931 | No weakness recorded | 2020-04-09 | – | 17 |
| RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638 | Cross-site Scripting | 2022-03-09 | – | 6 |
Subdomains55,670
| Name | Scope | First seen |
|---|---|---|
| academic-cms.github.comadmin | Not in the scope | 2026-11-14 |
| adm.github.comadmin | Not in the scope | 2026-11-14 |
| www.adm.github.comadmin | Not in the scope | 2026-11-14 |
| adm2.github.comadmin | Not in the scope | 2026-11-14 |
| admin.github.comadmin | Not in the scope | 2026-11-14 |
| admin-antivirus.github.comadmin | Not in the scope | 2026-11-14 |
| admin-covid19.github.comadmin | Not in the scope | 2026-11-14 |
| admin-virus.github.comadmin | Not in the scope | 2026-11-14 |
| autoconfig.admin.github.comadmin | Not in the scope | 2026-11-14 |
| beta.admin.github.comadmin, staging | Not in the scope | 2026-11-14 |
| builder.admin.github.comadmin | Not in the scope | 2026-11-14 |
| sigmavirus24.admin.github.comadmin | Not in the scope | 2026-11-14 |
| virus.admin.github.comadmin | Not in the scope | 2026-11-14 |
| webmail.admin.github.comadmin, mail | Not in the scope | 2026-11-14 |
| admin0.github.comadmin | Not in the scope | 2026-11-14 |
| admin01.github.comadmin | Not in the scope | 2026-11-14 |
| admin1.github.comadmin | Not in the scope | 2026-11-14 |
| admin1-antivirus.github.comadmin | Not in the scope | 2026-11-14 |
| admin1-berb-antivirus.github.comadmin | Not in the scope | 2026-11-14 |
| admin1-covid19.github.comadmin | Not in the scope | 2026-11-14 |
| covid19.admin1.github.comadmin | Not in the scope | 2026-11-14 |
| sigmavirus24.admin1.github.comadmin | Not in the scope | 2026-11-14 |
| virus.admin1.github.comadmin | Not in the scope | 2026-11-14 |
| admin1berb-antivirus.github.comadmin | Not in the scope | 2026-11-14 |
| admin1covid19.github.comadmin | Not in the scope | 2026-11-14 |
| admin1sigmavirus24.github.comadmin | Not in the scope | 2026-11-14 |
| admin2.github.comadmin | Not in the scope | 2026-11-14 |
| admin3.github.comadmin | Not in the scope | 2026-11-14 |
| admin5.github.comadmin | Not in the scope | 2026-11-14 |
| admin6.github.comadmin | Not in the scope | 2026-11-14 |
| administration.github.comadmin | Not in the scope | 2026-11-14 |
| administrator.github.comadmin | Not in the scope | 2026-11-14 |
| administrator-berb-antivirus.github.comadmin | Not in the scope | 2026-11-14 |
| administrator-covid19.github.comadmin | Not in the scope | 2026-11-14 |
| administrator-sigmavirus24.github.comadmin | Not in the scope | 2026-11-14 |
| administrator-virus.github.comadmin | Not in the scope | 2026-11-14 |
| antivirus.administrator.github.comadmin | Not in the scope | 2026-11-14 |
| covid19.administrator.github.comadmin | Not in the scope | 2026-11-14 |
| virus.administrator.github.comadmin | Not in the scope | 2026-11-14 |
| antivirus-cms.github.comadmin | Not in the scope | 2026-11-14 |
| admin.antivirus.github.comadmin | Not in the scope | 2026-11-14 |
| cms.antivirus.github.comadmin | Not in the scope | 2026-11-14 |
| ariadne-cms.github.comadmin | Not in the scope | 2026-11-14 |
| backoffice.github.comadmin | Not in the scope | 2026-11-14 |
| berb-antivirus-admin1.github.comadmin | Not in the scope | 2026-11-14 |
| cert-manager-webhook-inwx.bitte-ein-bit.github.comadmin | Not in the scope | 2026-11-14 |
| acme.apis.webhook.acme.pkg.cert-manager.cert-manager.github.comadmin, api | Not in the scope | 2026-11-14 |
| admin.classroom.github.comadmin | Not in the scope | 2026-11-14 |
| cpanel.classroom.github.comadmin | Not in the scope | 2026-11-14 |
| console.cloud.github.comadmin | Not in the scope | 2026-11-14 |
| cms.github.comadmin | Not in the scope | 2026-11-14 |
| cms-sw.github.comadmin | Not in the scope | 2026-11-14 |
| cms-virus.github.comadmin | Not in the scope | 2026-11-14 |
| antivirus.cms.github.comadmin | Not in the scope | 2026-11-14 |
| covid19.cms.github.comadmin | Not in the scope | 2026-11-14 |
| sigmavirus24.cms.github.comadmin | Not in the scope | 2026-11-14 |
| virus.cms.github.comadmin | Not in the scope | 2026-11-14 |
| www.cms.github.comadmin | Not in the scope | 2026-11-14 |
| cms1.github.comadmin | Not in the scope | 2026-11-14 |
| cms1-covid19.github.comadmin | Not in the scope | 2026-11-14 |
| cms1-virus.github.comadmin | Not in the scope | 2026-11-14 |
| antivirus.cms1.github.comadmin | Not in the scope | 2026-11-14 |
| covid19.cms1.github.comadmin | Not in the scope | 2026-11-14 |
| sigmavirus24.cms1.github.comadmin | Not in the scope | 2026-11-14 |
| virus.cms1.github.comadmin | Not in the scope | 2026-11-14 |
| cms2.github.comadmin | Not in the scope | 2026-11-14 |
| cms3.github.comadmin | Not in the scope | 2026-11-14 |
| console.github.comadmin | Not in the scope | 2026-11-14 |
| covid19-admin.github.comadmin | Not in the scope | 2026-11-14 |
| covid19-admin1.github.comadmin | Not in the scope | 2026-11-14 |
| covid19-administrator.github.comadmin | Not in the scope | 2026-11-14 |
| covid19-cms.github.comadmin | Not in the scope | 2026-11-14 |
| admin.covid19.github.comadmin | Not in the scope | 2026-11-14 |
| admin1.covid19.github.comadmin | Not in the scope | 2026-11-14 |
| administrator.covid19.github.comadmin | Not in the scope | 2026-11-14 |
| cms.covid19.github.comadmin | Not in the scope | 2026-11-14 |
| covid19admin.github.comadmin | Not in the scope | 2026-11-14 |
| covid19cms.github.comadmin | Not in the scope | 2026-11-14 |
| cpanel.github.comadmin | Not in the scope | 2026-11-14 |
| builder.cpanel.github.comadmin | Not in the scope | 2026-11-14 |
| webmail.cpanel.github.comadmin, mail | Not in the scope | 2026-11-14 |
| www.cpanel.github.comadmin | Not in the scope | 2026-11-14 |
| cpanel1.github.comadmin | Not in the scope | 2026-11-14 |
| cpanel2.github.comadmin | Not in the scope | 2026-11-14 |
| cpanel3.github.comadmin | Not in the scope | 2026-11-14 |
| dashboard.github.comadmin | Not in the scope | 2026-11-14 |
| dashboard-virus.github.comadmin | Not in the scope | 2026-11-14 |
| www.dashboard.github.comadmin | Not in the scope | 2026-11-14 |
| data-dashboard.github.comadmin | Not in the scope | 2026-11-14 |
| infra-otc-cert-manager-webhook.dbildungsplattform.github.comadmin | Not in the scope | 2026-11-14 |
| dev-admin.github.comadmin, dev | Not in the scope | 2026-11-14 |
| admin.dev.github.comadmin, dev | Not in the scope | 2026-11-14 |
| admin.drvinceknight.github.comadmin | Not in the scope | 2026-11-14 |
| cpanel.drvinceknight.github.comadmin | Not in the scope | 2026-11-14 |
| cpanel-sigmavirus.drvinceknight.github.comadmin | Not in the scope | 2026-11-14 |
| admin.education.github.comadmin | Not in the scope | 2026-11-14 |
| cpanel.education.github.comadmin | Not in the scope | 2026-11-14 |
| admin.gist.github.comadmin | Not in the scope | 2026-11-14 |
| admin-antivirus.graphql.github.comadmin, api | Not in the scope | 2026-11-14 |
| manager.file.v1.healthcheckresponseb0z.github.comadmin | Not in the scope | 2026-11-14 |
0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.