Bug bounty program
EV
Equifax-vdp
Most upvoted reports7
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Important information leaked on Github#649322 | Authentication | 2019-08-22 | – | 98 |
| reflected XSS in [www.equifax.com]#1818163 | Cross-site Scripting | 2023-04-23 | – | 47 |
| Subdomain takeover at http://test.www.midigator.com#1718371 | Access Control | 2022-11-12 | – | 32 |
| Open SonarQube instance leaking internal source code#947946 | Information Disclosure | 2020-09-03 | – | 20 |
| reflected XSS in [www.equifax.com]#1818172 | Cross-site Scripting | 2023-04-23 | – | 19 |
| Information Leak (Github)#694931 | No weakness recorded | 2020-04-09 | – | 17 |
| RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638 | Cross-site Scripting | 2022-03-09 | – | 6 |
Subdomains55,670
| Name | Scope | First seen |
|---|---|---|
| redis1.ae.github.comdata | Not in the scope | 2026-11-14 |
| antivirus-s3.github.comdata | Not in the scope | 2026-11-14 |
| bucket.antivirus.github.comdata | Not in the scope | 2026-11-14 |
| s3.antivirus.github.comdata | Not in the scope | 2026-11-14 |
| db.api.github.comapi, data | Not in the scope | 2026-11-14 |
| elastic.api.github.comapi, data | Not in the scope | 2026-11-14 |
| ftp.api.github.comapi, data | Not in the scope | 2026-11-14 |
| mongo.api.github.comapi, data | Not in the scope | 2026-11-14 |
| mysql.api.github.comapi, data | Not in the scope | 2026-11-14 |
| upload.api.github.comapi, data | Not in the scope | 2026-11-14 |
| uploads.api.github.comapi, data | Not in the scope | 2026-11-14 |
| backup.github.comdata | Not in the scope | 2026-11-14 |
| backup-api.github.comapi, data | Not in the scope | 2026-11-14 |
| backup01.github.comdata | Not in the scope | 2026-11-14 |
| backup02.github.comdata | Not in the scope | 2026-11-14 |
| backup1.github.comdata | Not in the scope | 2026-11-14 |
| backup2.github.comdata | Not in the scope | 2026-11-14 |
| backup3.github.comdata | Not in the scope | 2026-11-14 |
| backup4.github.comdata | Not in the scope | 2026-11-14 |
| backup5.github.comdata | Not in the scope | 2026-11-14 |
| backup6.github.comdata | Not in the scope | 2026-11-14 |
| backups.github.comdata | Not in the scope | 2026-11-14 |
| s3.barnybug.github.comdata | Not in the scope | 2026-11-14 |
| ftp.blog.github.comdata | Not in the scope | 2026-11-14 |
| bucket.github.comdata | Not in the scope | 2026-11-14 |
| bucket-virus.github.comdata | Not in the scope | 2026-11-14 |
| covid19.bucket.github.comdata | Not in the scope | 2026-11-14 |
| sigmavirus24.bucket.github.comdata | Not in the scope | 2026-11-14 |
| s3.central.github.comdata | Not in the scope | 2026-11-14 |
| mongodb.classroom.github.comdata | Not in the scope | 2026-11-14 |
| upload.classroom.github.comdata | Not in the scope | 2026-11-14 |
| covid19-s3.github.comdata | Not in the scope | 2026-11-14 |
| bucket.covid19.github.comdata | Not in the scope | 2026-11-14 |
| s3.covid19.github.comdata | Not in the scope | 2026-11-14 |
| covid19bucket.github.comdata | Not in the scope | 2026-11-14 |
| ftp.cp.github.comdata | Not in the scope | 2026-11-14 |
| database.github.comdata | Not in the scope | 2026-11-14 |
| database1.github.comdata | Not in the scope | 2026-11-14 |
| database2.github.comdata | Not in the scope | 2026-11-14 |
| db.github.comdata | Not in the scope | 2026-11-14 |
| www.db.github.comdata | Not in the scope | 2026-11-14 |
| ftp.demo.github.comdata, test | Not in the scope | 2026-11-14 |
| ftp.desktop.github.comdata | Not in the scope | 2026-11-14 |
| ftp.dev.github.comdata, dev | Not in the scope | 2026-11-14 |
| django-mongodb-engine.github.comdata | Not in the scope | 2026-11-14 |
| bucket.docs.github.comdata | Not in the scope | 2026-11-14 |
| ftp.drvinceknight.github.comdata | Not in the scope | 2026-11-14 |
| mysql.drvinceknight.github.comdata | Not in the scope | 2026-11-14 |
| dump.github.comdata | Not in the scope | 2026-11-14 |
| db.education.github.comdata | Not in the scope | 2026-11-14 |
| elastic.education.github.comdata | Not in the scope | 2026-11-14 |
| ftp.education.github.comdata | Not in the scope | 2026-11-14 |
| mongo.education.github.comdata | Not in the scope | 2026-11-14 |
| mysql.education.github.comdata | Not in the scope | 2026-11-14 |
| upload.education.github.comdata | Not in the scope | 2026-11-14 |
| elastic.github.comdata | Not in the scope | 2026-11-14 |
| elasticsearch.github.comdata | Not in the scope | 2026-11-14 |
| mysql.example.github.comdata | Not in the scope | 2026-11-14 |
| files.github.comdata | Not in the scope | 2026-11-14 |
| autoconfig.files.github.comdata | Not in the scope | 2026-11-14 |
| autodiscover.files.github.comdata, mail | Not in the scope | 2026-11-14 |
| webdisk.files.github.comdata | Not in the scope | 2026-11-14 |
| www.files.github.comdata | Not in the scope | 2026-11-14 |
| files1.github.comdata | Not in the scope | 2026-11-14 |
| files2.github.comdata | Not in the scope | 2026-11-14 |
| files3.github.comdata | Not in the scope | 2026-11-14 |
| files4.github.comdata | Not in the scope | 2026-11-14 |
| ftp.forum.github.comdata | Not in the scope | 2026-11-14 |
| ftp.fr.github.comdata | Not in the scope | 2026-11-14 |
| ftp.github.comdata | Not in the scope | 2026-11-14 |
| ftp-eu.github.comdata | Not in the scope | 2026-11-14 |
| www.ftp.github.comdata | Not in the scope | 2026-11-14 |
| ftp01.github.comdata | Not in the scope | 2026-11-14 |
| ftp02.github.comdata | Not in the scope | 2026-11-14 |
| ftp1.github.comdata | Not in the scope | 2026-11-14 |
| ftp10.github.comdata | Not in the scope | 2026-11-14 |
| ftp12.github.comdata | Not in the scope | 2026-11-14 |
| ftp13.github.comdata | Not in the scope | 2026-11-14 |
| ftp14.github.comdata | Not in the scope | 2026-11-14 |
| ftp15.github.comdata | Not in the scope | 2026-11-14 |
| ftp2.github.comdata | Not in the scope | 2026-11-14 |
| ftp3.github.comdata | Not in the scope | 2026-11-14 |
| ftp4.github.comdata | Not in the scope | 2026-11-14 |
| ftp5.github.comdata | Not in the scope | 2026-11-14 |
| ftp6.github.comdata | Not in the scope | 2026-11-14 |
| ftp7.github.comdata | Not in the scope | 2026-11-14 |
| ftp8.github.comdata | Not in the scope | 2026-11-14 |
| ftp9.github.comdata | Not in the scope | 2026-11-14 |
| db.gist.github.comdata | Not in the scope | 2026-11-14 |
| elastic.gist.github.comdata | Not in the scope | 2026-11-14 |
| ftp.gist.github.comdata | Not in the scope | 2026-11-14 |
| mongo.gist.github.comdata | Not in the scope | 2026-11-14 |
| mongodb.gist.github.comdata | Not in the scope | 2026-11-14 |
| mysql.gist.github.comdata | Not in the scope | 2026-11-14 |
| upload.gist.github.comdata | Not in the scope | 2026-11-14 |
| db.help.github.comdata | Not in the scope | 2026-11-14 |
| elastic.help.github.comdata | Not in the scope | 2026-11-14 |
| mongo.help.github.comdata | Not in the scope | 2026-11-14 |
| mysql.help.github.comdata | Not in the scope | 2026-11-14 |
| holland-backup.github.comdata | Not in the scope | 2026-11-14 |
0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.