Bug bounty program · HackerOne
Most upvoted reports14
- #3355766ValidDLL side-loading vulnerability in Sony Music Center for PC Ver. 2.7.2 (Latest version)Sony · File and Path Handling · 2026 · High–109votes
- #1935151ValidSQL Injection at https://████ via ███ parameterSony · SQL Injection · 2023–74votes
- #2642615Valid明確な認証不備および潜在的な中間者攻撃の可能性（Clear Authentication Deficiencies & Potential for Man-in-the-Middle Attacks）Sony · Cryptography · 2025 · High–71votes
- #3514490No longer publicImproper State Validation on Sony WH-CH520 via BLE Command Service leads to unauthorized Bluetooth pairing and audio hijackingSony · No weakness recorded–67votes
- #2256032ValidSQL injection at ███████Sony · SQL Injection · 2024–63votes
- #971590ValidSSRF on http://www.███████/crossdomain.php via url parameterSony · Server-Side Request Forgery · 2022–42votes
- #329572ValidRemote Code Execution (RCE) in a Sony WebSystemSony · Deserialization and Object Injection · 2019–40votes
- #1320084ValidPath Traversal issue at https://████/blaze/Sony · File and Path Handling · 2022–40votes
- #986380ValidLFI at http://www.████Sony · Command and Code Injection · 2022–37votes
- #1339430ValidBlind User-Agent SQL Injection to Blind Remote OS Command Execution at █████████Sony · Command and Code Injection · 2022–26votes
Subdomains13,535
0 covered by the program's own scope · 0 first seen this week
Roots:sony.com 13,535
Name suggestsAnything
13,535 names
| Name | Scope | First seen |
|---|---|---|
| 1billion-portal.sony.com | No domain scope published | 2026-11-14 |
| dev.1billion-portal.sony.comdev | No domain scope published | 2026-11-14 |
| stg.1billion-portal.sony.comstaging | No domain scope published | 2026-11-14 |
| 25m-guest-wifi.sony.com | No domain scope published | 2026-11-14 |
| 25mguestwifi.sony.com | No domain scope published | 2026-11-14 |
| account.sony.com | No domain scope published | 2026-11-14 |
| acm.account.sony.com | No domain scope published | 2026-11-14 |
| animax.id.acm.account.sony.com | No domain scope published | 2026-11-14 |
| auth.id.acm.account.sony.comauth | No domain scope published | 2026-11-14 |
| hpc.id.acm.account.sony.com | No domain scope published | 2026-11-14 |
| locatone.id.acm.account.sony.com | No domain scope published | 2026-11-14 |
| signin.id.acm.account.sony.comauth | No domain scope published | 2026-11-14 |
| wena.id.acm.account.sony.com | No domain scope published | 2026-11-14 |
| mk.acm.account.sony.com | No domain scope published | 2026-11-14 |
| o2.acm.account.sony.com | No domain scope published | 2026-11-14 |
| static.acm.account.sony.com | No domain scope published | 2026-11-14 |
| c1-np.account.sony.com | No domain scope published | 2026-11-14 |
| ca.c1-np.account.sony.com | No domain scope published | 2026-11-14 |
| ca-origin.c1-np.account.sony.com | No domain scope published | 2026-11-14 |
| my.c1-np.account.sony.com | No domain scope published | 2026-11-14 |
| www.my.c1-np.account.sony.com | No domain scope published | 2026-11-14 |
| c1-pmgt.account.sony.com | No domain scope published | 2026-11-14 |
| ca.c1-pmgt.account.sony.com | No domain scope published | 2026-11-14 |
| my.c1-pmgt.account.sony.com | No domain scope published | 2026-11-14 |
| www.my.c1-pmgt.account.sony.com | No domain scope published | 2026-11-14 |
| ca.c1-spint.account.sony.com | No domain scope published | 2026-11-14 |
| ca.account.sony.com | No domain scope published | 2026-11-14 |
| auth.cim.account.sony.comauth | No domain scope published | 2026-11-14 |
| www.auth.cim.account.sony.comauth | No domain scope published | 2026-11-14 |
| batch.cim.account.sony.com | No domain scope published | 2026-11-14 |
| www.batch.cim.account.sony.com | No domain scope published | 2026-11-14 |
| d5.cim.account.sony.com | No domain scope published | 2026-11-14 |
| e1.cim.account.sony.com | No domain scope published | 2026-11-14 |
| auth.e1.cim.account.sony.comauth | No domain scope published | 2026-11-14 |
| batch.e1.cim.account.sony.com | No domain scope published | 2026-11-14 |
| resource.e1.cim.account.sony.com | No domain scope published | 2026-11-14 |
| auth.e2.cim.account.sony.comauth | No domain scope published | 2026-11-14 |
| batch.e2.cim.account.sony.com | No domain scope published | 2026-11-14 |
| resource.e2.cim.account.sony.com | No domain scope published | 2026-11-14 |
| auth.g99.cim.account.sony.comauth | No domain scope published | 2026-11-14 |
| batch.g99.cim.account.sony.com | No domain scope published | 2026-11-14 |
| resource.g99.cim.account.sony.com | No domain scope published | 2026-11-14 |
| auth.p1.cim.account.sony.comauth | No domain scope published | 2026-11-14 |
| batch.p1.cim.account.sony.com | No domain scope published | 2026-11-14 |
| resource.p1.cim.account.sony.com | No domain scope published | 2026-11-14 |
| auth.p2.cim.account.sony.comauth | No domain scope published | 2026-11-14 |
| batch.p2.cim.account.sony.com | No domain scope published | 2026-11-14 |
| resource.p2.cim.account.sony.com | No domain scope published | 2026-11-14 |
| resource.cim.account.sony.com | No domain scope published | 2026-11-14 |
| www.resource.cim.account.sony.com | No domain scope published | 2026-11-14 |
| d.account.sony.com | No domain scope published | 2026-11-14 |
| auth.d.account.sony.comauth | No domain scope published | 2026-11-14 |
| batch.d.account.sony.com | No domain scope published | 2026-11-14 |
| auth.p1.d.account.sony.comauth | No domain scope published | 2026-11-14 |
| batch.p1.d.account.sony.com | No domain scope published | 2026-11-14 |
| resource.p1.d.account.sony.com | No domain scope published | 2026-11-14 |
| auth.p2.d.account.sony.comauth | No domain scope published | 2026-11-14 |
| batch.p2.d.account.sony.com | No domain scope published | 2026-11-14 |
| resource.p2.d.account.sony.com | No domain scope published | 2026-11-14 |
| resource.d.account.sony.com | No domain scope published | 2026-11-14 |
| auth.d01.account.sony.comauth | No domain scope published | 2026-11-14 |
| batch.d01.account.sony.com | No domain scope published | 2026-11-14 |
| resource.d01.account.sony.com | No domain scope published | 2026-11-14 |
| auth.d02.account.sony.comauth | No domain scope published | 2026-11-14 |
| batch.d02.account.sony.com | No domain scope published | 2026-11-14 |
| resource.d02.account.sony.com | No domain scope published | 2026-11-14 |
| auth.d03.account.sony.comauth | No domain scope published | 2026-11-14 |
| batch.d03.account.sony.com | No domain scope published | 2026-11-14 |
| resource.d03.account.sony.com | No domain scope published | 2026-11-14 |
| auth.d04.account.sony.comauth | No domain scope published | 2026-11-14 |
| batch.d04.account.sony.com | No domain scope published | 2026-11-14 |
| resource.d04.account.sony.com | No domain scope published | 2026-11-14 |
| auth.d05.account.sony.comauth | No domain scope published | 2026-11-14 |
| batch.d05.account.sony.com | No domain scope published | 2026-11-14 |
| resource.d05.account.sony.com | No domain scope published | 2026-11-14 |
| d1-np.account.sony.com | No domain scope published | 2026-11-14 |
| d1-pmgt.account.sony.com | No domain scope published | 2026-11-14 |
| ca.d1-pmgt.account.sony.com | No domain scope published | 2026-11-14 |
| d1-pqa.account.sony.com | No domain scope published | 2026-11-14 |
| d1-spint.account.sony.com | No domain scope published | 2026-11-14 |
| ca.d1-spint.account.sony.com | No domain scope published | 2026-11-14 |
| d2-np.account.sony.com | No domain scope published | 2026-11-14 |
| ca.d2-np.account.sony.com | No domain scope published | 2026-11-14 |
| d2-pmgt.account.sony.com | No domain scope published | 2026-11-14 |
| d2-pqa.account.sony.com | No domain scope published | 2026-11-14 |
| d2-spint.account.sony.com | No domain scope published | 2026-11-14 |
| ca.d2-spint.account.sony.com | No domain scope published | 2026-11-14 |
| d3-np.account.sony.com | No domain scope published | 2026-11-14 |
| d3-pmgt.account.sony.com | No domain scope published | 2026-11-14 |
| d3-pqa.account.sony.com | No domain scope published | 2026-11-14 |
| ca.d3-pqa.account.sony.com | No domain scope published | 2026-11-14 |
| d3-spint.account.sony.com | No domain scope published | 2026-11-14 |
| d5-np.account.sony.com | No domain scope published | 2026-11-14 |
| d5-pmgt.account.sony.com | No domain scope published | 2026-11-14 |
| d5-pqa.account.sony.com | No domain scope published | 2026-11-14 |
| d5-spint.account.sony.com | No domain scope published | 2026-11-14 |
| devcms.account.sony.com | No domain scope published | 2026-11-14 |
| direct.account.sony.com | No domain scope published | 2026-11-14 |
| click.direct.account.sony.com | No domain scope published | 2026-11-14 |
| cloud.direct.account.sony.com | No domain scope published | 2026-11-14 |
Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. See the subdomains on the Atlas.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.