Bug bounty program
Most upvoted reports48
All reports| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| SQL Injection vulnerability found on ibm.com endpointAnalysed#3578842 | SQL Injection | 2026-03-12 | – | 137 |
| Potential Subdomain Takeover on IBM.com domain.Analysed#3592387 | Access Control | 2026-03-24 | – | 82 |
| Middleware Authentication Bypass on IBM PortalAnalysed#3088290 | Command and Code Injection | 2025-05-02 | – | 80 |
| SSRF via host header let access localhost via https://go.dialexa.comAnalysed#2696271 | No weakness recorded | 2024-10-03 | – | 75 |
| S3 Bucket Takeover on apptio endpointAnalysed#2498255 | Access Control | 2024-06-21 | – | 72 |
| SSRF and secret key disclosure found on Turbonomic endpointAnalysed#2697592 | Server-Side Request Forgery | 2024-09-19 | – | 71 |
| Unauthenticated Remote Access to Testing EndpointAnalysed#2192984 | Access Control | 2023-12-04 | – | 67 |
| [RCE] Remote Code Execution via React Server Components Vulnerability CVE-2025-55182Analysed#3458235 | Command and Code Injection | 2025-12-18 | – | 67 |
| RXSS in hidden parameterAnalysed#2090964 | Cross-site Scripting | 2024-04-23 | – | 65 |
| XSS Refelected on jazz.netAnalysed#2338285 | Cross-site Scripting | 2024-02-29 | – | 64 |
Subdomains104,394
0 names are covered by the program's own scope; 3 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.