Skip to content
Connect AISign inSign up free

Bug bounty program

LY

Lyst

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
7
Disclosed reports
9
Subdomains
1,624

Most upvoted reports9

Most upvoted reports of Lyst
ReportWeaknessDisclosedBountyVotes
Subdomain takeover of storybook.lystit.comAnalysed#779442Access Control2020-01-22$1,000163
Web Cache poisoning attack leads to User information Disclosure and moreAnalysed#631589Misconfiguration and Insecure Design2022-03-22–45
SSRF at iris.lystit.com#206894Server-Side Request Forgery2017-10-18–21
CSRF - Adding unlimited number of saved items via GET request#205953Cross-Site Request Forgery2017-09-28$15019
Site configured improperly at subdomain of lyst.co.uk#208480Misconfiguration and Insecure Design2017-03-29$10019
[https://█████████/]&&[https://█████████/] Open Redirection#537047Open Redirect2022-03-22–18
DOM XSS on http://talks.lystit.com#1031644Cross-site Scripting2021-02-09$10015
Mixed Active content issue on https://www.lyst.com#207329Misconfiguration and Insecure Design2017-02-22–12
Bypassing one-time checkout router page (revealing payment information)#271176Information Disclosure2018-05-10–12

Subdomains1,624

Root
Scope
Name suggests
First seen
Text file1,624 names
Subdomains of Lyst
NameScopeFirst seen
cdnk.lystit.comIn scope2026-11-14
cdnl.lystit.comIn scope2026-11-14
cdntest.lystit.comIn scope2026-11-14
cflogs-test.lystit.comtestIn scope2026-11-14
checkout.lystit.comIn scope2026-11-14
checkout-admin.lystit.comadminIn scope2026-11-14
ci3-beta.lystit.comstagingIn scope2026-11-14
circle.lystit.comIn scope2026-11-14
circleci.lystit.comciIn scope2026-11-14
circleci-migration.lystit.comciIn scope2026-11-14
app.circleci-migration.lystit.comciIn scope2026-11-14
app.circleci.lystit.comciIn scope2026-11-14
circleci3.lystit.comciIn scope2026-11-14
app.circleci3.lystit.comciIn scope2026-11-14
cloudflare-logs.lystit.commonitoringIn scope2026-11-14
cms.lystit.comadminIn scope2026-11-14
cms2.lystit.comadminIn scope2026-11-14
cms2-pr-2-web-cloudflare-alb-eks-1-26.lystit.comadminIn scope2026-11-14
cms2-pr-5-web-cloudflare-alb-eks-1-26.lystit.comadminIn scope2026-11-14
cms2-pr-6-web-cloudflare-alb-eks-1-26.lystit.comadminIn scope2026-11-14
codeartifact.lystit.comIn scope2026-11-14
codecov.lystit.comIn scope2026-11-14
codecov-2024.lystit.comIn scope2026-11-14
confluence.lystit.comtoolsIn scope2026-11-14
confluence-2020.lystit.comtoolsIn scope2026-11-14
confluence-backup.lystit.comdata, toolsIn scope2026-11-14
confluence-internal.lystit.cominternal, toolsIn scope2026-11-14
confluence-staging.lystit.comstaging, toolsIn scope2026-11-14
connect.lystit.comIn scope2026-11-14
connect-admin.lystit.comadminIn scope2026-11-14
cornucopia.lystit.comIn scope2026-11-14
analytics-gif-pr-575-http-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
analytics-gif-pr-576-http-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
analytics-gif-pr-577-http-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
analytics-gif-pr-578-http-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
analytics-gif-pr-580-http-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
analytics-gif-pr-581-http-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
analytics-gif-pr-583-http-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
analytics-gif-pr-584-http-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
analytics-gif-pr-585-http-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
analytics-gif-pr-586-http-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
analytics-gif-pr-587-http-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
analytics-gif-pr-588-http-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
analytics-gif-pr-589-http-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
analytics-gif-pr-590-http-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
braze-api-pr-634-web-public-cloudflare-alb.eks-1-32.cztio.lystit.comapiIn scope2026-11-14
braze-api-pr-635-web-public-cloudflare-alb.eks-1-32.cztio.lystit.comapiIn scope2026-11-14
braze-api-pr-636-web-public-cloudflare-alb.eks-1-32.cztio.lystit.comapiIn scope2026-11-14
braze-api-pr-637-web-public-cloudflare-alb.eks-1-32.cztio.lystit.comapiIn scope2026-11-14
catalog-pr-2585-admin-web-cloudflare-alb.eks-1-32.cztio.lystit.comadminIn scope2026-11-14
catalog-pr-2589-admin-web-cloudflare-alb.eks-1-32.cztio.lystit.comadminIn scope2026-11-14
catalog-pr-2590-admin-web-cloudflare-alb.eks-1-32.cztio.lystit.comadminIn scope2026-11-14
catalog-pr-2591-admin-web-cloudflare-alb.eks-1-32.cztio.lystit.comadminIn scope2026-11-14
catalog-pr-2592-admin-web-cloudflare-alb.eks-1-32.cztio.lystit.comadminIn scope2026-11-14
catalog-pr-2593-admin-web-cloudflare-alb.eks-1-32.cztio.lystit.comadminIn scope2026-11-14
catalog-pr-2594-admin-web-cloudflare-alb.eks-1-32.cztio.lystit.comadminIn scope2026-11-14
catalog-pr-2595-admin-web-cloudflare-alb.eks-1-32.cztio.lystit.comadminIn scope2026-11-14
catalog-pr-2596-admin-web-cloudflare-alb.eks-1-32.cztio.lystit.comadminIn scope2026-11-14
catalog-pr-2597-admin-web-cloudflare-alb.eks-1-32.cztio.lystit.comadminIn scope2026-11-14
catalog-pr-2598-admin-web-cloudflare-alb.eks-1-32.cztio.lystit.comadminIn scope2026-11-14
catalog-pr-2599-admin-web-cloudflare-alb.eks-1-32.cztio.lystit.comadminIn scope2026-11-14
catalog-pr-2600-admin-web-cloudflare-alb.eks-1-32.cztio.lystit.comadminIn scope2026-11-14
catalog-pr-2601-admin-web-cloudflare-alb.eks-1-32.cztio.lystit.comNewadminIn scope2026-11-15
cms2-pr-196-web-cloudflare-alb.eks-1-32.cztio.lystit.comadminIn scope2026-11-14
cms2-pr-197-web-cloudflare-alb.eks-1-32.cztio.lystit.comadminIn scope2026-11-14
cms2-pr-198-web-cloudflare-alb.eks-1-32.cztio.lystit.comadminIn scope2026-11-14
cms2-pr-199-web-cloudflare-alb.eks-1-32.cztio.lystit.comadminIn scope2026-11-14
cms2-pr-200-web-cloudflare-alb.eks-1-32.cztio.lystit.comadminIn scope2026-11-14
cms2-pr-201-web-cloudflare-alb.eks-1-32.cztio.lystit.comadminIn scope2026-11-14
codeartifact-proxy-pr-20-web-public-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
codeartifact-proxy-pr-21-web-public-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
designer-moderation-pr-222-web-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
designer-moderation-pr-223-web-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
designer-moderation-pr-224-web-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
designer-moderation-pr-225-web-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
designer-moderation-pr-226-web-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
designer-moderation-pr-227-web-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
designer-moderation-pr-228-web-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
designer-moderation-pr-229-web-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
designer-moderation-pr-230-web-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
disco-evals-pr-17-web-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
disco-evals-pr-19-web-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
disco-evals-pr-20-web-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
disco-evals-pr-21-web-cloudflare-alb.eks-1-32.cztio.lystit.comNewIn scope2026-11-15
disco-evals-pr-22-web-cloudflare-alb.eks-1-32.cztio.lystit.comNewIn scope2026-11-15
helloworld-pr-278-web-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
hr-sync-pr-269-web-public-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
i18n-pr-262-web-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
i18n-pr-263-web-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
i18n-pr-264-web-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
i18n-pr-266-web-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
i18n-pr-267-web-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
i18n-pr-268-web-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
i18n-pr-269-web-cloudflare-alb.eks-1-32.cztio.lystit.comIn scope2026-11-14
i18n-pr-271-web-cloudflare-alb.eks-1-32.cztio.lystit.comNewIn scope2026-11-15
i18n-pr-272-web-cloudflare-alb.eks-1-32.cztio.lystit.comNewIn scope2026-11-15
lyst-connect-pr-1332-admin-cloudflare-alb.eks-1-32.cztio.lystit.comadminIn scope2026-11-14
lyst-connect-pr-1333-admin-cloudflare-alb.eks-1-32.cztio.lystit.comadminIn scope2026-11-14
lyst-connect-pr-1334-admin-cloudflare-alb.eks-1-32.cztio.lystit.comadminIn scope2026-11-14
lyst-connect-pr-1335-admin-cloudflare-alb.eks-1-32.cztio.lystit.comadminIn scope2026-11-14

1,623 names are covered by the program's own scope; 26 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated