Bug bounty program
MA
Mars
Most upvoted reports68
All reports| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Account Takeover in Password Reset FunctionAnalysed#3228888 | Authentication | 2025-09-02 | – | 105 |
| Reflected HTML Injection via contact (faq) search parameter on ██████████Analysed#2587101 | Cross-site Scripting | 2024-11-25 | – | 103 |
| █████████ when adding branches to your accountAnalysed#2756402 | Insecure Direct Object Reference | 2024-11-26 | – | 98 |
| Reflected HTML Injection via contact (faq) search parameter on ███]=Analysed#2578985 | Cross-site Scripting | 2024-11-25 | – | 82 |
| Unrestricted File Upload at ██████████Analysed#2357778 | File and Path Handling | 2024-02-19 | – | 78 |
| sqli on █████████ search functionalityAnalysed#2446550 | SQL Injection | 2024-06-25 | – | 72 |
| CVE-█████-35813 in █████Analysed#2200329 | File and Path Handling | 2026-02-24 | – | 71 |
| RXSS on ██████ via customerId parameterAnalysed#3126603 | Cross-site Scripting | 2025-07-28 | – | 71 |
| Unauthenticated Sensitive Information Disclosure on █████████ CVE-2021-38314Analysed#1452774 | Information Disclosure | 2025-09-02 | – | 67 |
| Upload profile photo and Pets addition - IDORAnalysed#2393021 | Insecure Direct Object Reference | 2024-11-21 | – | 66 |
Subdomains3,528
| Name | Scope | First seen |
|---|---|---|
| agnostic-qa.mars.comtest | In scope | 2026-11-14 |
| www.agnostic-qa.mars.comtest | In scope | 2026-11-14 |
| agnostic-sit.mars.comtest | In scope | 2026-11-14 |
| agnostic-uat.mars.comtest | In scope | 2026-11-14 |
| agnosticportalapi-qa.mars.comtest | In scope | 2026-11-14 |
| agnosticportalapi-sit.mars.comtest | In scope | 2026-11-14 |
| agnosticportalapi-uat.mars.comtest | In scope | 2026-11-14 |
| aimarta-test.mars.comtest | In scope | 2026-11-14 |
| api-qa.mars.comapi, test | In scope | 2026-11-14 |
| www.api-qa.mars.comapi, test | In scope | 2026-11-14 |
| couponsmanager-uat.b2b.mars.comtest | In scope | 2026-11-14 |
| gateway-uat.b2b.mars.comtest | In scope | 2026-11-14 |
| manager-uat.b2b.mars.comadmin, test | In scope | 2026-11-14 |
| search-uat.b2b.mars.comtest | In scope | 2026-11-14 |
| sso-uat.b2b.mars.comauth, test | In scope | 2026-11-14 |
| qa.brandsitedemo.mars.comtest | In scope | 2026-11-14 |
| test.brandsitedemo.mars.comtest | In scope | 2026-11-14 |
| qa.brandsiteguide.mars.comtest | In scope | 2026-11-14 |
| www.qa.brandsiteguide.mars.comtest | In scope | 2026-11-14 |
| test.brandsiteguide.mars.comtest | In scope | 2026-11-14 |
| ciam-qa.mars.comtest | In scope | 2026-11-14 |
| ciameu-qa.mars.comtest | In scope | 2026-11-14 |
| developer-qa.mars.comtest | In scope | 2026-11-14 |
| www.developer-qa.mars.comtest | In scope | 2026-11-14 |
| qa.digitalhealthtools.mars.comtest | In scope | 2026-11-14 |
| test.digitalhealthtools.mars.comtest | In scope | 2026-11-14 |
| dms-ap-uat.mars.comtest | In scope | 2026-11-14 |
| dms-portal-uat.mars.comtest | In scope | 2026-11-14 |
| dms-tw-uat.mars.comtest | In scope | 2026-11-14 |
| uat.dms.mars.comtest | In scope | 2026-11-14 |
| dmsap-uat.mars.comtest | In scope | 2026-11-14 |
| www.dmsap-uat.mars.comtest | In scope | 2026-11-14 |
| efexap-uat-dna.mars.comtest | In scope | 2026-11-14 |
| grafana-demo.mars.commonitoring, test | In scope | 2026-11-14 |
| www.grafana-demo.mars.commonitoring, test | In scope | 2026-11-14 |
| lighthouse-api-test.mars.comapi, test | In scope | 2026-11-14 |
| www.lighthouse-api-test.mars.comapi, test | In scope | 2026-11-14 |
| test.lighthouse-api.mars.comapi, test | In scope | 2026-11-14 |
| lighthouse-test.mars.comtest | In scope | 2026-11-14 |
| www.lighthouse-test.mars.comtest | In scope | 2026-11-14 |
| loki-demo.mars.comtest | In scope | 2026-11-14 |
| www.loki-demo.mars.comtest | In scope | 2026-11-14 |
| mach-test.mars.comtest | In scope | 2026-11-14 |
| malaysia-couponsmanager-uat.mars.comtest | In scope | 2026-11-14 |
| malaysia-manager-uat.mars.comadmin, test | In scope | 2026-11-14 |
| malaysia-search-uat.mars.comtest | In scope | 2026-11-14 |
| malaysia-sso-uat.mars.comauth, test | In scope | 2026-11-14 |
| malaysia-uat.mars.comtest | In scope | 2026-11-14 |
| marschampions-test.mars.comtest | In scope | 2026-11-14 |
| www.marschampions-test.mars.comtest | In scope | 2026-11-14 |
| test.marta.mars.comtest | In scope | 2026-11-14 |
| test-composer.marta.mars.comtest | In scope | 2026-11-14 |
| max-test.mars.comtest | In scope | 2026-11-14 |
| www.max-test.mars.comtest | In scope | 2026-11-14 |
| max-uat.mars.comtest | In scope | 2026-11-14 |
| mc-qa.mars.comtest | In scope | 2026-11-14 |
| test.mcs.mars.comtest | In scope | 2026-11-14 |
| neo-test.mars.comtest | In scope | 2026-11-14 |
| www.neo-test.mars.comtest | In scope | 2026-11-14 |
| neo-uat.mars.comtest | In scope | 2026-11-14 |
| www.neo-uat.mars.comtest | In scope | 2026-11-14 |
| odai-qa.mars.comtest | In scope | 2026-11-14 |
| privacera-audit-uat.mars.comtest | In scope | 2026-11-14 |
| privacera-ranger-uat.mars.comtest | In scope | 2026-11-14 |
| privacera-uat.mars.comtest | In scope | 2026-11-14 |
| prometheus-demo.mars.commonitoring, test | In scope | 2026-11-14 |
| www.prometheus-demo.mars.commonitoring, test | In scope | 2026-11-14 |
| qa.mars.comtest | In scope | 2026-11-14 |
| qa-fundraising.mars.comtest | In scope | 2026-11-14 |
| qa-infestationprogram.mars.comtest | In scope | 2026-11-14 |
| qa-info.mars.comtest | In scope | 2026-11-14 |
| qa-programainfestation.mars.comtest | In scope | 2026-11-14 |
| qa-sustainability.mars.comtest | In scope | 2026-11-14 |
| qa.risk.mars.comtest | In scope | 2026-11-14 |
| www.qa.risk.mars.comtest | In scope | 2026-11-14 |
| sitecore1-uat.mars.comtest | In scope | 2026-11-14 |
| smartefex-uat.mars.comtest | In scope | 2026-11-14 |
| stage-uat-sitecore-cd.mars.comstaging, test | In scope | 2026-11-14 |
| qa.termsandconditions.mars.comtest | In scope | 2026-11-14 |
| test.termsandconditions.mars.comtest | In scope | 2026-11-14 |
| test.mars.comtest | In scope | 2026-11-14 |
| test-cdn-lighthouse.mars.comtest | In scope | 2026-11-14 |
| test-cocoa.mars.comtest | In scope | 2026-11-14 |
| test-fundraising.mars.comtest | In scope | 2026-11-14 |
| test-infestationprogram.mars.comtest | In scope | 2026-11-14 |
| test-info.mars.comtest | In scope | 2026-11-14 |
| test-lighthouse.mars.comtest | In scope | 2026-11-14 |
| www.test-lighthouse.mars.comtest | In scope | 2026-11-14 |
| test-marsacss.mars.comtest | In scope | 2026-11-14 |
| test-marsmilitary.mars.comtest | In scope | 2026-11-14 |
| test-optimum-ceab-sftp-mobile.mars.comdata, test | In scope | 2026-11-14 |
| test-programainfestation.mars.comtest | In scope | 2026-11-14 |
| test-src-cdn-lighthouse.mars.comtest | In scope | 2026-11-14 |
| test-sustainability.mars.comtest | In scope | 2026-11-14 |
| veritassupplierportal.test3.mars.comtest | In scope | 2026-11-14 |
| wildcard.veritassupplierportal.test3.mars.comtest | In scope | 2026-11-14 |
| www.veritassupplierportal.test3.mars.comtest | In scope | 2026-11-14 |
| uat-marsacss.mars.comtest | In scope | 2026-11-14 |
| uat-royalcanin-cm-eukanuba.mars.comtest | In scope | 2026-11-14 |
| uat-royalcanin-cm-vetfocus.mars.comtest | In scope | 2026-11-14 |
3,528 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.