Skip to content
Connect AISign inSign up free

Bug bounty program

EX

EXNESS

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
14
Disclosed reports
14
Subdomains
307

Most upvoted reports14

All reports
Most upvoted reports of EXNESS
ReportWeaknessDisclosedBountyVotes
SSRF in graphQL query (pwapi.ex2b.com)Analysed#1864188Server-Side Request Forgery2023-07-24$3,000261
Blind SSRF on https://my.exnessaffiliates.com/ allows for internal network enumerationAnalysed#1832494Server-Side Request Forgery2023-10-25–120
Unrestricted Access to Celery Flower InstanceAnalysed#2264960No weakness recorded2023-12-14–97
IDOR in Stats API Endpoint Allows Viewing Equity or Net Profit of Any MT AccountAnalysed#1644436Insecure Direct Object Reference2022-12-05–58
Taking position in a discontinued forex pair without executing any tradesAnalysed#1509211No weakness recorded2022-04-13–32
[com.exness.android.pa Android] Universal XSS in webview. Lead to steal user cookiesAnalysed#532836Access Control2022-05-24$40026
Access control vulnerability (read-only)Analysed#1159367Insecure Direct Object Reference2022-04-13–25
Verification process done using different documents without corresponding to user information / User information can be changed after verificationAnalysed#1446107Input Validation and Logic2023-01-27–25
Access control vulnerability (read/write)Analysed#1174734Insecure Direct Object Reference2022-04-13–22
Double forward slash breaks server-side restrictions & allows access to prohibited services from a partner accountAnalysed#1829170No weakness recorded2023-02-10–16

Subdomains307

Root
Scope
Name suggests:VPN and remote access
First seen
Text fileClear filters12 names
Subdomains of EXNESS
NameScopeFirst seen
vpn.exness.comvpnNot in the scope2026-11-14
vpn-01.exness.comvpnNot in the scope2026-11-14
vpn-02.exness.comvpnNot in the scope2026-11-14
vpn-03.exness.comvpnNot in the scope2026-11-14
vpn-hk.exness.comvpnNot in the scope2026-11-14
vpn-nl.exness.comvpnNot in the scope2026-11-14
vpn2-nl.exness.comvpnNot in the scope2026-11-14
www.vpn.exness.comvpnNot in the scope2026-11-14
www.vpn-01.exness.comvpnNot in the scope2026-11-14
www.vpn-02.exness.comvpnNot in the scope2026-11-14
www.vpn-hk.exness.comvpnNot in the scope2026-11-14
www.vpn-nl.exness.comvpnNot in the scope2026-11-14

1 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated