Skip to content
Connect AISign inSign up free

Bug bounty program

SO

Sony

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
1
Disclosed reports
14
Subdomains
13,535
Vendor on CyberSIXT
Sony (79 CVEs, 0 exploited)

Most upvoted reports14

All reports
Most upvoted reports of Sony
ReportWeaknessDisclosedBountyVotes
DLL side-loading vulnerability in Sony Music Center for PC Ver. 2.7.2 (Latest version)Analysed#3355766File and Path Handling2026-06-05–109
SQL Injection at https://████ via ███ parameterAnalysed#1935151SQL Injection2023-04-24–74
明確な認証不備および潜在的な中間者攻撃の可能性（Clear Authentication Deficiencies & Potential for Man-in-the-Middle Attacks）Analysed#2642615Cryptography2025-07-08–71
Improper State Validation on Sony WH-CH520 via BLE Command Service leads to unauthorized Bluetooth pairing and audio hijacking#3514490No weakness recorded––67
SQL injection at ███████Analysed#2256032SQL Injection2024-01-24–63
SSRF on http://www.███████/crossdomain.php via url parameterAnalysed#971590Server-Side Request Forgery2022-10-06–42
Remote Code Execution (RCE) in a Sony WebSystemAnalysed#329572Deserialization and Object Injection2019-01-23–40
Path Traversal issue at https://████/blaze/Analysed#1320084File and Path Handling2022-10-06–40
LFI at http://www.████Analysed#986380Command and Code Injection2022-12-16–37
Blind User-Agent SQL Injection to Blind Remote OS Command Execution at █████████Analysed#1339430Command and Code Injection2022-07-06–26

Subdomains13,535

Root:sony.com
Scope
Name suggests:Development
First seen
Text fileClear filters779 names
Subdomains of Sony
NameScopeFirst seen
dev.1billion-portal.sony.comdevNo domain scope published2026-11-14
api.dev.payments.account.sony.comapi, devNo domain scope published2026-11-14
checkout.dev.payments.account.sony.comdevNo domain scope published2026-11-14
api.dev.test.payments.account.sony.comapi, dev, testNo domain scope published2026-11-14
checkout.dev.test.payments.account.sony.comdev, testNo domain scope published2026-11-14
archer-dev.am.sony.comdevNo domain scope published2026-11-14
archer-pub-dev.am.sony.comdevNo domain scope published2026-11-14
code-confluence-dev.am.sony.comdev, toolsNo domain scope published2026-11-14
code-gisd-connect-dev.am.sony.comdevNo domain scope published2026-11-14
code-jira-dev.am.sony.comdev, toolsNo domain scope published2026-11-14
dev.paqman.am.sony.comdevNo domain scope published2026-11-14
paris-dev.am.sony.comdevNo domain scope published2026-11-14
parisweb-dev.am.sony.comdevNo domain scope published2026-11-14
usculoffapp-dev.am.sony.comdevNo domain scope published2026-11-14
usdc1vaash-f5-dev.am.sony.comdevNo domain scope published2026-11-14
usdc1vaash-f5-dev01.am.sony.comdevNo domain scope published2026-11-14
usdc1vaash-f5-dev02.am.sony.comdevNo domain scope published2026-11-14
archer-dev.sony.comdevNo domain scope published2026-11-14
dev.blog.sony.comdevNo domain scope published2026-11-14
cxvmc-sf-dev-spe.sony.comdevNo domain scope published2026-11-14
api.dev-nova.sony.comapi, devNo domain scope published2026-11-14
dev.api.developer.sony.comapi, devNo domain scope published2026-11-14
crm-dev.developer.sony.comdevNo domain scope published2026-11-14
wildcard.crm-dev.developer.sony.comdevNo domain scope published2026-11-14
dev.developer.sony.comdevNo domain scope published2026-11-14
techhub.dev.developer.sony.comdevNo domain scope published2026-11-14
dl-dev.developer.sony.comdevNo domain scope published2026-11-14
draft-dev.developer.sony.comdevNo domain scope published2026-11-14
forum-dev.developer.sony.comdevNo domain scope published2026-11-14
legacy-dev.developer.sony.comdev, legacyNo domain scope published2026-11-14
static-dev.developer.sony.comdevNo domain scope published2026-11-14
console-dev.techhub.developer.sony.comadmin, devNo domain scope published2026-11-14
wp-dev.developer.sony.comdevNo domain scope published2026-11-14
wpp-dev.developer.sony.comdevNo domain scope published2026-11-14
admin.wpp-dev.developer.sony.comadmin, devNo domain scope published2026-11-14
wildcard.admin.wpp-dev.developer.sony.comadmin, devNo domain scope published2026-11-14
wildcard.wpp-dev.developer.sony.comdevNo domain scope published2026-11-14
dev.api.dx-ai.sony.comapi, devNo domain scope published2026-11-14
dev.certapi.dx-ai.sony.comdevNo domain scope published2026-11-14
dev.dx-ai.sony.comdevNo domain scope published2026-11-14
alz-sri-dev.dxservice.sony.comdevNo domain scope published2026-11-14
dqe-dev.dxservice.sony.comdevNo domain scope published2026-11-14
synthetic-vault-dev.dxservice.sony.comdev, toolsNo domain scope published2026-11-14
dev.eams.sony.comdevNo domain scope published2026-11-14
test.dev.eams.sony.comdev, testNo domain scope published2026-11-14
www.dev.eams.sony.comdevNo domain scope published2026-11-14
render.dev.vcs.electronics.sony.comdevNo domain scope published2026-11-14
empdir-dev.sony.comdevNo domain scope published2026-11-14
dev.esupport.sony.comdevNo domain scope published2026-11-14
bis-dev.eu.sony.comdevNo domain scope published2026-11-14
costsheet-dev.eu.sony.comdevNo domain scope published2026-11-14
dev.eng.eu.sony.comdevNo domain scope published2026-11-14
jss-dev.eu.sony.comdevNo domain scope published2026-11-14
aurora-dev.lundlab.eu.sony.comdevNo domain scope published2026-11-14
muse-dev.lundlab.eu.sony.comdevNo domain scope published2026-11-14
2a57j786296y1oht2zvk6zy5fxspsk4.muse-dev.lundlab.eu.sony.comdevNo domain scope published2026-11-14
api.muse-dev.lundlab.eu.sony.comapi, devNo domain scope published2026-11-14
influx.muse-dev.lundlab.eu.sony.comdevNo domain scope published2026-11-14
lmludp40txyyp6adofdshxqij3xr23g.muse-dev.lundlab.eu.sony.comdevNo domain scope published2026-11-14
www.muse-dev.lundlab.eu.sony.comdevNo domain scope published2026-11-14
khxkthcbmpzcwi2ci3brclm97w5uyu1.www.muse-dev.lundlab.eu.sony.comdevNo domain scope published2026-11-14
pditscheduler-dev.eu.sony.comdevNo domain scope published2026-11-14
rd-dev-jenkins.eu.sony.comci, devNo domain scope published2026-11-14
rd-dev-jenkins.rds.eu.sony.comci, devNo domain scope published2026-11-14
xdev-sap-dev.eu.sony.comdevNo domain scope published2026-11-14
hub-dev.gcs.sony.comdevNo domain scope published2026-11-14
dev-synapse.ai.gis.sony.comdevNo domain scope published2026-11-14
assistiq-dev.gis.sony.comdevNo domain scope published2026-11-14
dev.cdp.gis.sony.comdevNo domain scope published2026-11-14
platform-develop.cdp.gis.sony.comdevNo domain scope published2026-11-14
gcs-hub.dev.gis.sony.comdevNo domain scope published2026-11-14
dev.gateway.gis.sony.comdevNo domain scope published2026-11-14
gcs-dev-mcp-platform.gis.sony.comdevNo domain scope published2026-11-14
gcs-mrp-dev.gis.sony.comdevNo domain scope published2026-11-14
gcstest-app-dev.gis.sony.comdevNo domain scope published2026-11-14
git-dev.gis.sony.comdev, gitNo domain scope published2026-11-14
hub-dev.gis.sony.comdevNo domain scope published2026-11-14
dev.api.gto-data-warehouse.sony.comapi, devNo domain scope published2026-11-14
dev.gto-data-warehouse.sony.comdevNo domain scope published2026-11-14
dev.wss.gto-data-warehouse.sony.comdevNo domain scope published2026-11-14
dev-pk-api.ics.sony.comapi, devNo domain scope published2026-11-14
dev.lx.sony.comdevNo domain scope published2026-11-14
dev.ack.me.sony.comdevNo domain scope published2026-11-14
wildcard.dev.ack.me.sony.comdevNo domain scope published2026-11-14
dev.bach.me.sony.comdevNo domain scope published2026-11-14
account.dev.bravia.me.sony.comdevNo domain scope published2026-11-14
origin.account.dev.bravia.me.sony.comdevNo domain scope published2026-11-14
accounts.dev.bravia.me.sony.comdevNo domain scope published2026-11-14
origin.accounts.dev.bravia.me.sony.comdevNo domain scope published2026-11-14
bcim.docs.dev.bravia.me.sony.comdevNo domain scope published2026-11-14
ww.id.dev.bravia.me.sony.comdevNo domain scope published2026-11-14
oauth.dev.bravia.me.sony.comauth, devNo domain scope published2026-11-14
dev.collect.me.sony.comdevNo domain scope published2026-11-14
api.dev.gallery.me.sony.comapi, devNo domain scope published2026-11-14
vish-api.dev.gallery.me.sony.comapi, devNo domain scope published2026-11-14
ap-dev.dev.lex.me.sony.comdevNo domain scope published2026-11-14
ap-stage.dev.lex.me.sony.comdev, stagingNo domain scope published2026-11-14
eu-dev.dev.lex.me.sony.comdevNo domain scope published2026-11-14
eu-stage.dev.lex.me.sony.comdev, stagingNo domain scope published2026-11-14
na-dev.dev.lex.me.sony.comdevNo domain scope published2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated