Bug bounty program
Most upvoted reports48
All reports| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| SQL Injection vulnerability found on ibm.com endpointAnalysed#3578842 | SQL Injection | 2026-03-12 | – | 137 |
| Potential Subdomain Takeover on IBM.com domain.Analysed#3592387 | Access Control | 2026-03-24 | – | 82 |
| Middleware Authentication Bypass on IBM PortalAnalysed#3088290 | Command and Code Injection | 2025-05-02 | – | 80 |
| SSRF via host header let access localhost via https://go.dialexa.comAnalysed#2696271 | No weakness recorded | 2024-10-03 | – | 75 |
| S3 Bucket Takeover on apptio endpointAnalysed#2498255 | Access Control | 2024-06-21 | – | 72 |
| SSRF and secret key disclosure found on Turbonomic endpointAnalysed#2697592 | Server-Side Request Forgery | 2024-09-19 | – | 71 |
| Unauthenticated Remote Access to Testing EndpointAnalysed#2192984 | Access Control | 2023-12-04 | – | 67 |
| [RCE] Remote Code Execution via React Server Components Vulnerability CVE-2025-55182Analysed#3458235 | Command and Code Injection | 2025-12-18 | – | 67 |
| RXSS in hidden parameterAnalysed#2090964 | Cross-site Scripting | 2024-04-23 | – | 65 |
| XSS Refelected on jazz.netAnalysed#2338285 | Cross-site Scripting | 2024-02-29 | – | 64 |
Subdomains104,394
| Name | Scope | First seen |
|---|---|---|
| confluence.tools.b2b.ibm.comtools | No domain scope published | 2026-11-14 |
| confluence-dev.tools.b2b.ibm.comdev, tools | No domain scope published | 2026-11-14 |
| confluence-dr.tools.b2b.ibm.comtools | No domain scope published | 2026-11-14 |
| q1artifactory-dev.canlab.ibm.comdev, tools | No domain scope published | 2026-11-14 |
| q1docker-dev.canlab.ibm.comdev, tools | No domain scope published | 2026-11-14 |
| q1docker-qa.canlab.ibm.comtest, tools | No domain scope published | 2026-11-14 |
| q1docker-release.canlab.ibm.comtools | No domain scope published | 2026-11-14 |
| si-fred-sonar.canlab.ibm.comtools | No domain scope published | 2026-11-14 |
| si-fred-sonar-sandbox.canlab.ibm.comtest, tools | No domain scope published | 2026-11-14 |
| artifactory.taas.cloud.ibm.comtools | No domain scope published | 2026-11-14 |
| artifactory.test.cloud.ibm.comtest, tools | No domain scope published | 2026-11-14 |
| artifactory-edge.test.cloud.ibm.comtest, tools | No domain scope published | 2026-11-14 |
| s-campusbiotech-superset.comprehend.ibm.comtools | No domain scope published | 2026-11-14 |
| s-tep-eu-superset.comprehend.ibm.comtools | No domain scope published | 2026-11-14 |
| jira.coxf.ibm.comtools | No domain scope published | 2026-11-14 |
| www.jira.coxf.ibm.comtools | No domain scope published | 2026-11-14 |
| wiki.digitalcredentials.ibm.comtools | No domain scope published | 2026-11-14 |
| jira-ford.edst.ibm.comtools | No domain scope published | 2026-11-14 |
| liberty-nexus.edst.ibm.comtools | No domain scope published | 2026-11-14 |
| mig-nexus.edst.ibm.comtools | No domain scope published | 2026-11-14 |
| mig-sonar.edst.ibm.comtools | No domain scope published | 2026-11-14 |
| gain-jira-poc.sl.edst.ibm.comtools | No domain scope published | 2026-11-14 |
| ibm-jira.col.eslabs.ibm.comtools | No domain scope published | 2026-11-14 |
| docker.github.ibm.comgit, tools | No domain scope published | 2026-11-14 |
| wiki0.haw.ibm.comtools | No domain scope published | 2026-11-14 |
| vault.haifa.il.ibm.comtools | No domain scope published | 2026-11-14 |
| us-south-k8s.nonprod.intranet.ibm.cominternal, tools | No domain scope published | 2026-11-14 |
| us-south-k8s.preprod.intranet.ibm.cominternal, staging, tools | No domain scope published | 2026-11-14 |
| sonarqube.secintel.intranet.ibm.cominternal, tools | No domain scope published | 2026-11-14 |
| sonarqube-stage.secintel.intranet.ibm.cominternal, staging, tools | No domain scope published | 2026-11-14 |
| us-east-k8s.intranet.ibm.cominternal, tools | No domain scope published | 2026-11-14 |
| us-south-k8s.intranet.ibm.cominternal, tools | No domain scope published | 2026-11-14 |
| unified-profile-api.us-south-k8s.intranet.ibm.comapi, internal, tools | No domain scope published | 2026-11-14 |
| w2-homepage-destinations-service.us-south-k8s.intranet.ibm.cominternal, tools | No domain scope published | 2026-11-14 |
| w2-homepage-users.us-south-k8s.intranet.ibm.cominternal, tools | No domain scope published | 2026-11-14 |
| w2-login.us-south-k8s.intranet.ibm.comauth, internal, tools | No domain scope published | 2026-11-14 |
| w3-notifications-subscription-service.us-south-k8s.intranet.ibm.cominternal, tools | No domain scope published | 2026-11-14 |
| w3-publisher-commenter.us-south-k8s.intranet.ibm.cominternal, tools | No domain scope published | 2026-11-14 |
| w3-publisher-published-site-service.us-south-k8s.intranet.ibm.cominternal, tools | No domain scope published | 2026-11-14 |
| w3-publisher-user-agreement-service.us-south-k8s.intranet.ibm.cominternal, tools | No domain scope published | 2026-11-14 |
| w3-publisher-w3-publisher-blog-service.us-south-k8s.intranet.ibm.cominternal, tools | No domain scope published | 2026-11-14 |
| w3-publisher-w3-publisher-image-service.us-south-k8s.intranet.ibm.cominternal, tools | No domain scope published | 2026-11-14 |
| confluence.mgapp.ibm.comtools | No domain scope published | 2026-11-14 |
| jira.mgapp.ibm.comtools | No domain scope published | 2026-11-14 |
| registry.open-trial-labs.ibm.comtools | No domain scope published | 2026-11-14 |
| nexus.tools.paymentscenter.ibm.comtools | No domain scope published | 2026-11-14 |
| sonar.tools.paymentscenter.ibm.comtools | No domain scope published | 2026-11-14 |
| ibm-prod-jira01.peakwork-coc.ibm.comtools | No domain scope published | 2026-11-14 |
| harbor.sl.res.ibm.comtools | No domain scope published | 2026-11-14 |
| registry.st4sd.res.ibm.comtools | No domain scope published | 2026-11-14 |
| langfuse-nexus.vpc-int.res.ibm.comtools | No domain scope published | 2026-11-14 |
| llm-wiki.vpc-int.res.ibm.comtools | No domain scope published | 2026-11-14 |
| trusted-registry.vpc-int.res.ibm.comtools | No domain scope published | 2026-11-14 |
| vault-ui.vpc-int.res.ibm.comtools | No domain scope published | 2026-11-14 |
| vault-ui-dev.vpc-int.res.ibm.comdev, tools | No domain scope published | 2026-11-14 |
| docker-mirror.vpc.res.ibm.comtools | No domain scope published | 2026-11-14 |
| vault.dev.saas.ibm.comdev, tools | No domain scope published | 2026-11-14 |
| alertmanager-vault.platform.saas.ibm.commonitoring, tools | No domain scope published | 2026-11-14 |
| artifactory-ap.platform.saas.ibm.comtools | No domain scope published | 2026-11-14 |
| bastion-vault.platform.saas.ibm.comtools | No domain scope published | 2026-11-14 |
| grafana-vault.platform.saas.ibm.commonitoring, tools | No domain scope published | 2026-11-14 |
| loki-vault.platform.saas.ibm.comtools | No domain scope published | 2026-11-14 |
| prometheus-vault.platform.saas.ibm.commonitoring, tools | No domain scope published | 2026-11-14 |
| thanos-querier-vault.platform.saas.ibm.comtools | No domain scope published | 2026-11-14 |
| vault.test.saas.ibm.comtest, tools | No domain scope published | 2026-11-14 |
| vault.saas.ibm.comtools | No domain scope published | 2026-11-14 |
| console-vault.scs.ibm.comadmin, tools | No domain scope published | 2026-11-14 |
| atl-dev-jira-01a.sec.ibm.comdev, tools | No domain scope published | 2026-11-14 |
| atl-dev-jira-01a-new.sec.ibm.comdev, tools | No domain scope published | 2026-11-14 |
| atl-dev-jira-02a.sec.ibm.comdev, tools | No domain scope published | 2026-11-14 |
| atl-dev-jira-03a.sec.ibm.comdev, tools | No domain scope published | 2026-11-14 |
| atl-dev-jira-04a.sec.ibm.comdev, tools | No domain scope published | 2026-11-14 |
| atl-prd-jira-01a.sec.ibm.comtools | No domain scope published | 2026-11-14 |
| atl-prd-jira-02a.sec.ibm.comtools | No domain scope published | 2026-11-14 |
| atl-prd-sonar-01a.sec.ibm.comtools | No domain scope published | 2026-11-14 |
| atl-prd-sonar-02a.sec.ibm.comtools | No domain scope published | 2026-11-14 |
| atl-prd-vault-01a.sec.ibm.comtools | No domain scope published | 2026-11-14 |
| atl-prd-vault-01b.sec.ibm.comtools | No domain scope published | 2026-11-14 |
| atl-prd-vault-01c.sec.ibm.comtools | No domain scope published | 2026-11-14 |
| atl-prd-vault-01d.sec.ibm.comtools | No domain scope published | 2026-11-14 |
| atl-prd-vault-01e.sec.ibm.comtools | No domain scope published | 2026-11-14 |
| atl-prd-wiki-01a-new.sec.ibm.comtools | No domain scope published | 2026-11-14 |
| atl-stg-vault-01a.sec.ibm.comstaging, tools | No domain scope published | 2026-11-14 |
| atl-stg-vault-01b.sec.ibm.comstaging, tools | No domain scope published | 2026-11-14 |
| atl-stg-vault-01c.sec.ibm.comstaging, tools | No domain scope published | 2026-11-14 |
| vault.ca.sec.ibm.comtools | No domain scope published | 2026-11-14 |
| dal09-dev-jira-01a.sec.ibm.comdev, tools | No domain scope published | 2026-11-14 |
| dal09-dev-jira-02a.sec.ibm.comdev, tools | No domain scope published | 2026-11-14 |
| dal09-dev-jira-03a.sec.ibm.comdev, tools | No domain scope published | 2026-11-14 |
| dal09-dev-vault-01a.sec.ibm.comdev, tools | No domain scope published | 2026-11-14 |
| dal09-dev-vault-01b.sec.ibm.comdev, tools | No domain scope published | 2026-11-14 |
| dal09-dev-vault-01c.sec.ibm.comdev, tools | No domain scope published | 2026-11-14 |
| dal09-prd-nexus-01a.sec.ibm.comtools | No domain scope published | 2026-11-14 |
| dal09-prd-vault-01a.sec.ibm.comtools | No domain scope published | 2026-11-14 |
| dal09-prd-vault-01b.sec.ibm.comtools | No domain scope published | 2026-11-14 |
| dal09-prd-vault-01c.sec.ibm.comtools | No domain scope published | 2026-11-14 |
| dev-vault.sec.ibm.comdev, tools | No domain scope published | 2026-11-14 |
| fra02-prd-vault-01a.sec.ibm.comtools | No domain scope published | 2026-11-14 |
| fra02-prd-vault-01b.sec.ibm.comtools | No domain scope published | 2026-11-14 |
| fra02-prd-vault-01c.sec.ibm.comtools | No domain scope published | 2026-11-14 |
0 names are covered by the program's own scope; 3 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.