Skip to content
Connect AISign inSign up free

Bug bounty program

SO

Sony

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
1
Disclosed reports
14
Subdomains
13,535
Vendor on CyberSIXT
Sony (79 CVEs, 0 exploited)

Most upvoted reports14

All reports
Most upvoted reports of Sony
ReportWeaknessDisclosedBountyVotes
DLL side-loading vulnerability in Sony Music Center for PC Ver. 2.7.2 (Latest version)Analysed#3355766File and Path Handling2026-06-05–109
SQL Injection at https://████ via ███ parameterAnalysed#1935151SQL Injection2023-04-24–74
明確な認証不備および潜在的な中間者攻撃の可能性（Clear Authentication Deficiencies & Potential for Man-in-the-Middle Attacks）Analysed#2642615Cryptography2025-07-08–71
Improper State Validation on Sony WH-CH520 via BLE Command Service leads to unauthorized Bluetooth pairing and audio hijacking#3514490No weakness recorded––67
SQL injection at ███████Analysed#2256032SQL Injection2024-01-24–63
SSRF on http://www.███████/crossdomain.php via url parameterAnalysed#971590Server-Side Request Forgery2022-10-06–42
Remote Code Execution (RCE) in a Sony WebSystemAnalysed#329572Deserialization and Object Injection2019-01-23–40
Path Traversal issue at https://████/blaze/Analysed#1320084File and Path Handling2022-10-06–40
LFI at http://www.████Analysed#986380Command and Code Injection2022-12-16–37
Blind User-Agent SQL Injection to Blind Remote OS Command Execution at █████████Analysed#1339430Command and Code Injection2022-07-06–26

Subdomains13,535

Root
Scope
Name suggests
First seen
Text file13,535 names
Subdomains of Sony
NameScopeFirst seen
usdc1vaash-oob-fmc.am.sony.comNo domain scope published2026-11-14
usdc1vaash-oob-leaf201.am.sony.comNo domain scope published2026-11-14
usdc1vaash-oob-leaf202.am.sony.comNo domain scope published2026-11-14
usdc1vaash-oob-leaf203.am.sony.comNo domain scope published2026-11-14
usdc1vaash-oob-leaf204.am.sony.comNo domain scope published2026-11-14
usdc1vaash-oob-leaf205.am.sony.comNo domain scope published2026-11-14
usdc1vaash-oob-leaf206.am.sony.comNo domain scope published2026-11-14
usdc1vaash-oob-leaf207.am.sony.comNo domain scope published2026-11-14
usdc1vaash-oob-leaf208.am.sony.comNo domain scope published2026-11-14
usdc1vaash-oob-leaf209.am.sony.comNo domain scope published2026-11-14
usdc1vaash-oob-leaf210.am.sony.comNo domain scope published2026-11-14
usdc1vaash-oob-leaf211.am.sony.comNo domain scope published2026-11-14
usdc1vaash-oob-leaf212.am.sony.comNo domain scope published2026-11-14
usdc1vaash-oob-spine101.am.sony.comNo domain scope published2026-11-14
usdc1vaash-oob-spine102.am.sony.comNo domain scope published2026-11-14
usdc1vaash-oob-spine103.am.sony.comNo domain scope published2026-11-14
usdc1vaash-oob-spine104.am.sony.comNo domain scope published2026-11-14
usdc1vaash-sec-analyzer.am.sony.comNo domain scope published2026-11-14
usdc1vaash-sniff01.am.sony.comNo domain scope published2026-11-14
usdc1vcc01.am.sony.comNo domain scope published2026-11-14
usdc1xmsg01v.am.sony.comNo domain scope published2026-11-14
usdc1xmsg02v.am.sony.comNo domain scope published2026-11-14
usdc1xmsg03v.am.sony.comNo domain scope published2026-11-14
usdc1xoff01v.am.sony.comNo domain scope published2026-11-14
usdc1xoff02v.am.sony.comNo domain scope published2026-11-14
usdc1xoff03v.am.sony.comNo domain scope published2026-11-14
usdc1xpdcexo01v.am.sony.comNo domain scope published2026-11-14
usdc1xpdcexo02v.am.sony.comNo domain scope published2026-11-14
usdc2xoff01v.am.sony.comNo domain scope published2026-11-14
usdc3xoff01v.am.sony.comNo domain scope published2026-11-14
uselspehx01.am.sony.comNo domain scope published2026-11-14
uselspehx01d.am.sony.comNo domain scope published2026-11-14
usfcsvn01.am.sony.comNo domain scope published2026-11-14
usherconfdev01.am.sony.comNo domain scope published2026-11-14
usherduoproxy01.am.sony.comNo domain scope published2026-11-14
usherfemas01.am.sony.comNo domain scope published2026-11-14
ushergitlabdev01.am.sony.comNo domain scope published2026-11-14
ushergsirtvm01v.am.sony.comNo domain scope published2026-11-14
usherscafeax01.am.sony.comNo domain scope published2026-11-14
usherscakvmfor.am.sony.comNo domain scope published2026-11-14
ushervaepo01.am.sony.comNo domain scope published2026-11-14
ushervagitlab01.am.sony.comNo domain scope published2026-11-14
ushervagsirtapps.am.sony.comNo domain scope published2026-11-14
ushervajira01d.am.sony.comNo domain scope published2026-11-14
ushervajira01p.am.sony.comNo domain scope published2026-11-14
ushervajira01s.am.sony.comNo domain scope published2026-11-14
ushervawatchlist01.am.sony.comNo domain scope published2026-11-14
ushubeastdns01.am.sony.comNo domain scope published2026-11-14
ushubeastdns02.am.sony.comNo domain scope published2026-11-14
ushubwestdns01.am.sony.comNo domain scope published2026-11-14
ushubwestdns02.am.sony.comNo domain scope published2026-11-14
uslanowa01.am.sony.comNo domain scope published2026-11-14
uslanpportal01.am.sony.comNo domain scope published2026-11-14
uslveadc01.am.sony.comNo domain scope published2026-11-14
uslveadc02.am.sony.comNo domain scope published2026-11-14
uslveadclb01.am.sony.comNo domain scope published2026-11-14
uslveadlds01a.am.sony.comNo domain scope published2026-11-14
uslveadlds01b.am.sony.comNo domain scope published2026-11-14
uslveamadc01v.am.sony.comNo domain scope published2026-11-14
uslveamadc02v.am.sony.comNo domain scope published2026-11-14
uslveape01.am.sony.comNo domain scope published2026-11-14
uslveappli01.am.sony.comNo domain scope published2026-11-14
uslveasus01.am.sony.comNo domain scope published2026-11-14
uslvebld01.am.sony.comNo domain scope published2026-11-14
uslvebld02.am.sony.comNo domain scope published2026-11-14
uslvebld03.am.sony.comNo domain scope published2026-11-14
uslvebld04.am.sony.comNo domain scope published2026-11-14
uslvebld05.am.sony.comNo domain scope published2026-11-14
uslvebld06.am.sony.comNo domain scope published2026-11-14
uslvebld07.am.sony.comNo domain scope published2026-11-14
uslvebld08.am.sony.comNo domain scope published2026-11-14
uslvebld09.am.sony.comNo domain scope published2026-11-14
uslvebld10.am.sony.comNo domain scope published2026-11-14
uslvebld101.am.sony.comNo domain scope published2026-11-14
uslvebld11.am.sony.comNo domain scope published2026-11-14
uslvebld12.am.sony.comNo domain scope published2026-11-14
uslvebld13.am.sony.comNo domain scope published2026-11-14
uslvebld14.am.sony.comNo domain scope published2026-11-14
uslvebld15.am.sony.comNo domain scope published2026-11-14
uslvebld16.am.sony.comNo domain scope published2026-11-14
uslvebld17.am.sony.comNo domain scope published2026-11-14
uslvebld18.am.sony.comNo domain scope published2026-11-14
uslvebld19.am.sony.comNo domain scope published2026-11-14
uslvebld20.am.sony.comNo domain scope published2026-11-14
uslvebld21.am.sony.comNo domain scope published2026-11-14
uslvebld22.am.sony.comNo domain scope published2026-11-14
uslvebldjs10.am.sony.comNo domain scope published2026-11-14
uslvecagci01.am.sony.comNo domain scope published2026-11-14
uslvecasper01.am.sony.comNo domain scope published2026-11-14
uslvecasperdev01.am.sony.comNo domain scope published2026-11-14
uslvedrone01.am.sony.comNo domain scope published2026-11-14
uslveepo01.am.sony.comNo domain scope published2026-11-14
uslveghepolicy01.am.sony.comNo domain scope published2026-11-14
uslvegithub01.am.sony.comNo domain scope published2026-11-14
uslvegithub02.am.sony.comNo domain scope published2026-11-14
uslvegithub03.am.sony.comNo domain scope published2026-11-14
uslvegithub04.am.sony.comNo domain scope published2026-11-14
uslvegithub05.am.sony.comNo domain scope published2026-11-14
uslvegrnkpr01.am.sony.comNo domain scope published2026-11-14
uslvejkci03.am.sony.comNo domain scope published2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated