Bug bounty program
MG
MTN Group
Most upvoted reports128
All reports| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| SQL Injection on cookie parameterAnalysed#761304 | SQL Injection | 2020-05-03 | – | 323 |
| SQLi | in URL pathsAnalysed#2958619 | SQL Injection | 2025-03-06 | – | 149 |
| IDOR at mtnmobad.mtnbusiness.com.ng leads to PII leakage.Analysed#1773609 | Insecure Direct Object Reference | 2024-10-05 | – | 135 |
| Yet Another OTP code Leaked in the API ResponseAnalysed#2635315 | Authentication | 2025-01-08 | – | 135 |
| FULL ACCOUNT TAKEOVERAnalysed#2542372 | No weakness recorded | 2024-08-17 | – | 123 |
| SQL injection in URL path leads to Database AccessAnalysed#2633959 | SQL Injection | 2025-01-08 | – | 115 |
| Authentication Bypass Leads To Complete Account TakeveOver on ██████████Analysed#1709881 | Authentication | 2024-09-14 | – | 109 |
| DOM Based Reflected Cross Site ScriptingAnalysed#2321874 | Cross-site Scripting | 2024-12-25 | – | 104 |
| Reflected cross site scripting (XSS) attacks Reflected XSS attacks,Analysed#1799197 | Cross-site Scripting | 2024-08-30 | – | 100 |
| Ability to Add and Verify Uncontrolled Mobile Numbers Leading to Account Takeover (ATO)Analysed#2762462 | Authentication | 2025-03-04 | – | 98 |
Subdomains214,285
| Name | Scope | First seen |
|---|---|---|
| 105-236-0-65-esr-lo.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-10.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-101.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-103.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-11.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-111.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-112.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-114.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-119.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-121.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-140.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-143.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-15.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-152.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-156.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-16.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-2.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-21.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-212.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-23.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-24.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-26.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-28.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-29.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-3.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-31.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-35.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-36.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-37.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-39.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-4.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-41.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-42.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-46.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-49.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-5.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-50.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-51.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-53.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-54.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-56.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-58.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-59.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-6.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-61.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-62.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-63.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-65.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-70.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-72.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-73.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-74.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-75.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-76.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-77.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-78.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-80.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-83.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-89.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-9.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-92.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-93.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-96.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-97.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-13-229-99.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-1.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-100.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-101.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-103.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-104.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-105.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-106.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-107.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-108.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-11.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-111.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-112.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-113.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-114.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-115.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-116.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-117.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-118.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-119.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-12.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-120.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-121.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-123.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-124.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-125.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-126.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-127.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-128.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-129.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-130.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-131.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-132.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-133.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-134.mtn.co.za | Not in the scope | 2026-11-14 |
| 196-41-181-135.mtn.co.za | Not in the scope | 2026-11-14 |
28 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.