Skip to content
Connect AISign inSign up free

Bug bounty program

PL

PlayStation

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
24
Disclosed reports
20
Subdomains
10,273

Most upvoted reports20

All reports
Most upvoted reports of PlayStation
ReportWeaknessDisclosedBountyVotes
Websites Can Run Arbitrary Code on Machines Running the 'PlayStation Now' ApplicationAnalysed#873614Command and Code Injection2020-12-04$15,000780
Use-After-Free In IPV6_2292PKTOPTIONS leading To Arbitrary Kernel R/W PrimitivesAnalysed#826026Memory Corruption2020-07-06$10,000741
SOCK_RAW sockets reachable from Webkit process allows triggering double free in IP6_EXTHDR_CHECKAnalysed#943231Memory Corruption2021-01-12$10,000298
bd-j exploit chain#1379975Access Control2022-06-10$20,000298
size_t-to-int vulnerability in exFAT leads to memory corruption via malformed USB flash drivesAnalysed#1340942Memory Corruption2022-09-21$10,000280
sys_fsc2h_ctrl kernel stack freeAnalysed#2900606Memory Corruption2025-04-18$10,000236
Double fdrop on a socket through sys_netcontrolAnalysed#3320669Memory Corruption2026-05-01$10,000228
Remote vulnerabilities in sppAnalysed#2177925Memory Corruption2024-04-25$12,500197
Access token stealing.Analysed#821896Access Control2020-11-21$1,200177
SSRF chained to hit internal host leading to another SSRF which allows to read internal images.Analysed#826097Server-Side Request Forgery2021-03-30$1,000148

Subdomains10,273

Root
Scope
Name suggests:Monitoring
First seen
Text fileClear filters24 names
Subdomains of PlayStation
NameScopeFirst seen
metrics.aem.playstation.commonitoringIn scope2026-11-14
status.sandbox-dev.playstation.comdev, monitoring, testIn scope2026-11-14
status.sandbox.playstation.commonitoring, testIn scope2026-11-14
status.playstation.commonitoringIn scope2026-11-14
grafana.ai.staging.studios.playstation.commonitoring, stagingIn scope2026-11-14
prometheus.ai.staging.studios.playstation.commonitoring, stagingIn scope2026-11-14
rnps-elk.qa.tools.ce.playstation.netmonitoring, testIn scope2026-11-14
staging.rnps-elk.qa.tools.ce.playstation.netmonitoring, staging, testIn scope2026-11-14
elk.vue.tools.ce.playstation.netmonitoringIn scope2026-11-14
metrics.us-east-2.admin.kcloud.playstation.netadmin, monitoringIn scope2026-11-14
metrics.us-west-2.admin.kcloud.playstation.netadmin, monitoringIn scope2026-11-14
logs.playstation.netmonitoringIn scope2026-11-14
metrics.playstation.netmonitoringIn scope2026-11-14
monitor.playstation.netmonitoringIn scope2026-11-14
monitoring.playstation.netmonitoringIn scope2026-11-14
nagios.playstation.netmonitoringIn scope2026-11-14
sentry.playstation.netmonitoringIn scope2026-11-14
status.playstation.netmonitoringIn scope2026-11-14
akamai-logs.psn.tools.playstation.netmonitoringIn scope2026-11-14
grafana.psn.tools.playstation.netmonitoringIn scope2026-11-14
www.grafana.psn.tools.playstation.netmonitoringIn scope2026-11-14
splunk.psn.tools.playstation.netmonitoringIn scope2026-11-14
www.splunk.psn.tools.playstation.netmonitoringIn scope2026-11-14
zabbix.playstation.netmonitoringIn scope2026-11-14

10,273 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated