Bug bounty program · HackerOne
Most upvoted reports68
- #3228888ValidAccount Takeover in Password Reset FunctionMars · Authentication · 2025 · Critical–105votes
- #2587101ValidReflected HTML Injection via contact (faq) search parameter on ██████████Mars · Cross-site Scripting · 2024 · Medium–103votes
- #2756402Valid█████████ when adding branches to your accountMars · Insecure Direct Object Reference · 2024 · Critical–98votes
- #2578985ValidReflected HTML Injection via contact (faq) search parameter on ███]=Mars · Cross-site Scripting · 2024 · Medium–82votes
- #2357778ValidUnrestricted File Upload at ██████████Mars · File and Path Handling · 2024–78votes
- #2446550Validsqli on █████████ search functionalityMars · SQL Injection · 2024 · Medium–72votes
- #2200329ValidCVE-█████-35813 in █████Mars · File and Path Handling · 2026 · Critical–71votes
- #3126603ValidRXSS on ██████ via customerId parameterMars · Cross-site Scripting · 2025 · Medium–71votes
- #1452774ValidUnauthenticated Sensitive Information Disclosure on █████████ CVE-2021-38314Mars · Information Disclosure · 2025 · Medium · no account (title)–67votes
- #2393021ValidUpload profile photo and Pets addition - IDORMars · Insecure Direct Object Reference · 2024 · High–66votes
Subdomains3,528
3,528 covered by the program's own scope · 0 first seen this week
Roots:mars.com 1,963 · 1,963 in scoperoyalcanin.com 554 · 554 in scopemms.com 401 · 401 in scopebanfield.com 214 · 214 in scopepedigree.com 109 · 109 in scopeextragum.com 50 · 50 in scopeskittles.com 50 · 50 in scopetwix.com 49 · 49 in scopebluepearlvet.com 46 · 46 in scopeorbitgum.com 34 · 34 in scopevcahospitals.com 25 · 25 in scopewhiskas.com 13 · 13 in scopedovechocolate.com 10 · 10 in scopemarschocolate.com 8 · 8 in scoperoyal-canin.com 2 · 2 in scope
Name suggestsAnything
3,528 names
| Name | Scope | First seen |
|---|---|---|
| 55423-612-866-1493-www.banfield.com | In scope | 2026-11-14 |
| adfs.banfield.comauth | In scope | 2026-11-14 |
| api.banfield.comapi | In scope | 2026-11-14 |
| api-bhome-test.banfield.comapi, test | In scope | 2026-11-14 |
| www.api-bhome-test.banfield.comapi, test | In scope | 2026-11-14 |
| dev.api.banfield.comapi, dev | In scope | 2026-11-14 |
| dev01.api.banfield.comapi, dev | In scope | 2026-11-14 |
| dev02.api.banfield.comapi, dev | In scope | 2026-11-14 |
| dev03.api.banfield.comapi, dev | In scope | 2026-11-14 |
| dev04.api.banfield.comapi, dev | In scope | 2026-11-14 |
| dev05.api.banfield.comapi, dev | In scope | 2026-11-14 |
| dev06.api.banfield.comapi, dev | In scope | 2026-11-14 |
| dev06-sbx.api.banfield.comapi, dev, test | In scope | 2026-11-14 |
| dev07.api.banfield.comapi, dev | In scope | 2026-11-14 |
| dev08.api.banfield.comapi, dev | In scope | 2026-11-14 |
| dev09.api.banfield.comapi, dev | In scope | 2026-11-14 |
| dev10.api.banfield.comapi, dev | In scope | 2026-11-14 |
| dev11.api.banfield.comapi, dev | In scope | 2026-11-14 |
| dev12.api.banfield.comapi, dev | In scope | 2026-11-14 |
| dev13.api.banfield.comapi, dev | In scope | 2026-11-14 |
| dev14.api.banfield.comapi, dev | In scope | 2026-11-14 |
| mok01.api.banfield.comapi | In scope | 2026-11-14 |
| mok02.api.banfield.comapi | In scope | 2026-11-14 |
| mok03.api.banfield.comapi | In scope | 2026-11-14 |
| owp.api.banfield.comapi | In scope | 2026-11-14 |
| www.owp.api.banfield.comapi | In scope | 2026-11-14 |
| prod.api.banfield.comapi | In scope | 2026-11-14 |
| sqa01.api.banfield.comapi | In scope | 2026-11-14 |
| sqa02.api.banfield.comapi | In scope | 2026-11-14 |
| sqa03.api.banfield.comapi | In scope | 2026-11-14 |
| sqa04.api.banfield.comapi | In scope | 2026-11-14 |
| sqa05.api.banfield.comapi | In scope | 2026-11-14 |
| sqa06.api.banfield.comapi | In scope | 2026-11-14 |
| sqa06-sbx.api.banfield.comapi, test | In scope | 2026-11-14 |
| sqa07.api.banfield.comapi | In scope | 2026-11-14 |
| test.api.banfield.comapi, test | In scope | 2026-11-14 |
| www.api.banfield.comapi | In scope | 2026-11-14 |
| assets.banfield.com | In scope | 2026-11-14 |
| assets-staging.banfield.comstaging | In scope | 2026-11-14 |
| autodiscover.banfield.commail | In scope | 2026-11-14 |
| av.banfield.com | In scope | 2026-11-14 |
| ban-ods-int-apim.banfield.com | In scope | 2026-11-14 |
| ban-sc-dev-01.banfield.comdev | In scope | 2026-11-14 |
| www.ban-sc-dev-01.banfield.comdev | In scope | 2026-11-14 |
| banfieldcmg.banfield.com | In scope | 2026-11-14 |
| www.banfieldcmg.banfield.com | In scope | 2026-11-14 |
| banvpn.banfield.com | In scope | 2026-11-14 |
| www.banvpn.banfield.com | In scope | 2026-11-14 |
| beta-shop.banfield.comstaging | In scope | 2026-11-14 |
| bhometest.banfield.com | In scope | 2026-11-14 |
| www.bhometest.banfield.com | In scope | 2026-11-14 |
| o989.ptr6112.careeralerts.banfield.com | In scope | 2026-11-14 |
| cloudvdi.banfield.com | In scope | 2026-11-14 |
| complaints.banfield.com | In scope | 2026-11-14 |
| concur.banfield.com | In scope | 2026-11-14 |
| dev.banfield.comdev | In scope | 2026-11-14 |
| learning-owp.dev.banfield.comdev | In scope | 2026-11-14 |
| dev01.banfield.comdev | In scope | 2026-11-14 |
| dev02.banfield.comdev | In scope | 2026-11-14 |
| dev03.banfield.comdev | In scope | 2026-11-14 |
| dev04.banfield.comdev | In scope | 2026-11-14 |
| dev05.banfield.comdev | In scope | 2026-11-14 |
| dev06.banfield.comdev | In scope | 2026-11-14 |
| dev07.banfield.comdev | In scope | 2026-11-14 |
| dev08.banfield.comdev | In scope | 2026-11-14 |
| dev09.banfield.comdev | In scope | 2026-11-14 |
| drview.banfield.com | In scope | 2026-11-14 |
| www.drview.banfield.com | In scope | 2026-11-14 |
| email.banfield.com | In scope | 2026-11-14 |
| www.email.banfield.com | In scope | 2026-11-14 |
| es.banfield.com | In scope | 2026-11-14 |
| www.es.banfield.com | In scope | 2026-11-14 |
| exchangedelegation.banfield.com | In scope | 2026-11-14 |
| gpvpn.banfield.com | In scope | 2026-11-14 |
| www.gpvpn.banfield.com | In scope | 2026-11-14 |
| guest.banfield.com | In scope | 2026-11-14 |
| horizon.banfield.comvpn | In scope | 2026-11-14 |
| www.horizon.banfield.comvpn | In scope | 2026-11-14 |
| horizonpoc.banfield.com | In scope | 2026-11-14 |
| horizonprod.banfield.com | In scope | 2026-11-14 |
| hostmaster.banfield.com | In scope | 2026-11-14 |
| images.banfield.com | In scope | 2026-11-14 |
| images-staging.banfield.comstaging | In scope | 2026-11-14 |
| info.banfield.com | In scope | 2026-11-14 |
| www.info.banfield.com | In scope | 2026-11-14 |
| int.banfield.com | In scope | 2026-11-14 |
| int2.banfield.com | In scope | 2026-11-14 |
| int4.banfield.com | In scope | 2026-11-14 |
| int5.banfield.com | In scope | 2026-11-14 |
| intelema.banfield.com | In scope | 2026-11-14 |
| www.intelema.banfield.com | In scope | 2026-11-14 |
| o988.ptr6706.jobalerts.banfield.com | In scope | 2026-11-14 |
| jobs.banfield.com | In scope | 2026-11-14 |
| www.jobs.banfield.com | In scope | 2026-11-14 |
| l1ise01.banfield.com | In scope | 2026-11-14 |
| l2ise01.banfield.com | In scope | 2026-11-14 |
| launch.banfield.com | In scope | 2026-11-14 |
| prd01.launch.banfield.com | In scope | 2026-11-14 |
| www.prd01.launch.banfield.com | In scope | 2026-11-14 |
| sqa02.launch.banfield.com | In scope | 2026-11-14 |
Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. See the subdomains on the Atlas.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.