Bug bounty program · HackerOne
Most upvoted reports14
- #3417162ValidAuthentication Bypass in Subscription Management Endpointlemlist · Insecure Direct Object Reference · 2025 · Critical–68votes
- #3378635ValidUnauthorized Password Reset Allows Account Takeover Across Tenant Boundarieslemlist · No weakness recorded · 2025 · High–65votes
- #3419636ValidAuthentication Token Theft via Open Redirect in Callback URL Parameterlemlist · Authentication · 2025 · Critical–60votes
- #919859Validstored xss in app.lemlist.comlemlist · Cross-site Scripting · 2020–26votes
- #722919ValidUnrestricted File Upload on https://app.lemlist.comlemlist · File and Path Handling · 2020–24votes
- #783392ValidSSRF in img.lemlist.com that leads to Localhost Port Scanninglemlist · Server-Side Request Forgery · 2020–23votes
- #932557ValidStored XSS at [ █████ ] in " LINKEDIN URL" Field.lemlist · Cross-site Scripting · 2020–18votes
- #1420697Valid[app.lemlist.com] Improper handling of payment lead to bypass paymentlemlist · Input Validation and Logic · 2022–18votes
- #1486327ValidSecurity misconfigurationlemlist · Misconfiguration and Insecure Design · 2022–15votes
- #1574017ValidClickjacking at app.lemlist.comlemlist · Misconfiguration and Insecure Design · 2022–13votes
Subdomains91
1 covered by the program's own scope · 0 first seen this week
Name suggestsAnything
91 names
| Name | Scope | First seen |
|---|---|---|
| academy.lemlist.com | Not in the scope | 2026-11-14 |
| admin.lemlist.comadmin | Not in the scope | 2026-11-14 |
| api.lemlist.comapi | Listed out of scope | 2026-11-14 |
| api2.lemlist.comapi | Not in the scope | 2026-11-14 |
| app.lemlist.com | In scope | 2026-11-14 |
| www.app.lemlist.com | Not in the scope | 2026-11-14 |
| app0.lemlist.com | Not in the scope | 2026-11-14 |
| app2.lemlist.com | Not in the scope | 2026-11-14 |
| backup.lemlist.comdata | Not in the scope | 2026-11-14 |
| blog.lemlist.com | Not in the scope | 2026-11-14 |
| blog2.lemlist.com | Not in the scope | 2026-11-14 |
| change.lemlist.com | Not in the scope | 2026-11-14 |
| chimera.lemlist.com | Not in the scope | 2026-11-14 |
| coach.lemlist.com | Not in the scope | 2026-11-14 |
| cust1.lemlist.com | Not in the scope | 2026-11-14 |
| cust2.lemlist.com | Not in the scope | 2026-11-14 |
| custom.lemlist.com | Not in the scope | 2026-11-14 |
| custom2.lemlist.com | Not in the scope | 2026-11-14 |
| db.lemlist.comdata | Not in the scope | 2026-11-14 |
| developer.lemlist.com | Not in the scope | 2026-11-14 |
| email.lemlist.com | Not in the scope | 2026-11-14 |
| links.emails.lemlist.com | Not in the scope | 2026-11-14 |
| files.lemlist.comdata | Not in the scope | 2026-11-14 |
| flavourfoundry.lemlist.com | Not in the scope | 2026-11-14 |
| fr.lemlist.com | Not in the scope | 2026-11-14 |
| free-tools.lemlist.com | Not in the scope | 2026-11-14 |
| get.lemlist.com | Not in the scope | 2026-11-14 |
| help.lemlist.com | Not in the scope | 2026-11-14 |
| img.lemlist.com | Not in the scope | 2026-11-14 |
| lab.lemlist.com | Not in the scope | 2026-11-14 |
| leadfinder.lemlist.com | Not in the scope | 2026-11-14 |
| app.leadfinder.lemlist.com | Not in the scope | 2026-11-14 |
| api.app.leadfinder.lemlist.comapi | Not in the scope | 2026-11-14 |
| staging.app.leadfinder.lemlist.comstaging | Not in the scope | 2026-11-14 |
| api.staging.app.leadfinder.lemlist.comapi, staging | Not in the scope | 2026-11-14 |
| daily.leadfinder.lemlist.com | Not in the scope | 2026-11-14 |
| mcp.leadfinder.lemlist.com | Not in the scope | 2026-11-14 |
| s.leadfinder.lemlist.com | Not in the scope | 2026-11-14 |
| sample.leadfinder.lemlist.com | Not in the scope | 2026-11-14 |
| staging.leadfinder.lemlist.comstaging | Not in the scope | 2026-11-14 |
| wvd.staging.leadfinder.lemlist.comstaging | Not in the scope | 2026-11-14 |
| wvd.leadfinder.lemlist.com | Not in the scope | 2026-11-14 |
| lemhero.lemlist.com | Not in the scope | 2026-11-14 |
| link.lemlist.com | Not in the scope | 2026-11-14 |
| loginless.lemlist.com | Not in the scope | 2026-11-14 |
| lp.lemlist.com | Not in the scope | 2026-11-14 |
| email.m.lemlist.com | Not in the scope | 2026-11-14 |
| mobile.lemlist.com | Not in the scope | 2026-11-14 |
| mobile-signup.lemlist.com | Not in the scope | 2026-11-14 |
| ondemand.lemlist.com | Not in the scope | 2026-11-14 |
| ondemand-ext.lemlist.com | Not in the scope | 2026-11-14 |
| opera.lemlist.com | Not in the scope | 2026-11-14 |
| pages.lemlist.com | Not in the scope | 2026-11-14 |
| parking.lemlist.com | Not in the scope | 2026-11-14 |
| pix.lemlist.com | Not in the scope | 2026-11-14 |
| pop.lemlist.com | Not in the scope | 2026-11-14 |
| proxy.lemlist.com | Not in the scope | 2026-11-14 |
| rp.lemlist.com | Not in the scope | 2026-11-14 |
| sheets.lemlist.com | Not in the scope | 2026-11-14 |
| signup.lemlist.com | Not in the scope | 2026-11-14 |
| smtp.lemlist.commail | Not in the scope | 2026-11-14 |
| spendourmoney.lemlist.com | Not in the scope | 2026-11-14 |
| staging.lemlist.comstaging | Not in the scope | 2026-11-14 |
| staging-sheets.lemlist.comstaging | Not in the scope | 2026-11-14 |
| app.staging.lemlist.comstaging | Not in the scope | 2026-11-14 |
| custom.staging.lemlist.comstaging | Not in the scope | 2026-11-14 |
| enter.staging.lemlist.comstaging | Not in the scope | 2026-11-14 |
| mcp.staging.lemlist.comstaging | Not in the scope | 2026-11-14 |
| parking.staging.lemlist.comstaging | Not in the scope | 2026-11-14 |
| staging0.lemlist.comstaging | Not in the scope | 2026-11-14 |
| staging1.lemlist.comstaging | Not in the scope | 2026-11-14 |
| custom.staging1.lemlist.comstaging | Not in the scope | 2026-11-14 |
| domain.staging1.lemlist.comstaging | Not in the scope | 2026-11-14 |
| files.staging1.lemlist.comdata, staging | Not in the scope | 2026-11-14 |
| parking.staging1.lemlist.comstaging | Not in the scope | 2026-11-14 |
| staging2.lemlist.comstaging | Not in the scope | 2026-11-14 |
| status.lemlist.commonitoring | Not in the scope | 2026-11-14 |
| temp.lemlist.com | Not in the scope | 2026-11-14 |
| test.lemlist.comtest | Not in the scope | 2026-11-14 |
| theoldblog.lemlist.com | Not in the scope | 2026-11-14 |
| trail.lemlist.com | Not in the scope | 2026-11-14 |
| trust.lemlist.com | Not in the scope | 2026-11-14 |
| university.lemlist.com | Not in the scope | 2026-11-14 |
| update.lemlist.com | Not in the scope | 2026-11-14 |
| upflow-email.lemlist.com | Not in the scope | 2026-11-14 |
| vip.lemlist.com | Not in the scope | 2026-11-14 |
| visitors.lemlist.com | Not in the scope | 2026-11-14 |
| visitors-staging-ext.lemlist.comstaging | Not in the scope | 2026-11-14 |
| visitors-staging1-ext.lemlist.comstaging | Not in the scope | 2026-11-14 |
| web-assets.lemlist.com | Not in the scope | 2026-11-14 |
| www.lemlist.com | Listed out of scope | 2026-11-14 |
Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. See the subdomains on the Atlas.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.