Skip to content
Connect AISign inSign up free

Bug bounty program

SO

Sony

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
1
Disclosed reports
14
Subdomains
13,535
Vendor on CyberSIXT
Sony (79 CVEs, 0 exploited)

Most upvoted reports14

All reports
Most upvoted reports of Sony
ReportWeaknessDisclosedBountyVotes
DLL side-loading vulnerability in Sony Music Center for PC Ver. 2.7.2 (Latest version)Analysed#3355766File and Path Handling2026-06-05–109
SQL Injection at https://████ via ███ parameterAnalysed#1935151SQL Injection2023-04-24–74
明確な認証不備および潜在的な中間者攻撃の可能性（Clear Authentication Deficiencies & Potential for Man-in-the-Middle Attacks）Analysed#2642615Cryptography2025-07-08–71
Improper State Validation on Sony WH-CH520 via BLE Command Service leads to unauthorized Bluetooth pairing and audio hijacking#3514490No weakness recorded––67
SQL injection at ███████Analysed#2256032SQL Injection2024-01-24–63
SSRF on http://www.███████/crossdomain.php via url parameterAnalysed#971590Server-Side Request Forgery2022-10-06–42
Remote Code Execution (RCE) in a Sony WebSystemAnalysed#329572Deserialization and Object Injection2019-01-23–40
Path Traversal issue at https://████/blaze/Analysed#1320084File and Path Handling2022-10-06–40
LFI at http://www.████Analysed#986380Command and Code Injection2022-12-16–37
Blind User-Agent SQL Injection to Blind Remote OS Command Execution at █████████Analysed#1339430Command and Code Injection2022-07-06–26

Subdomains13,535

Root
Scope
Name suggests
First seen
Text file13,535 names
Subdomains of Sony
NameScopeFirst seen
stage3.electronics.sony.comstagingNo domain scope published2026-11-14
api.stage3.electronics.sony.comapi, stagingNo domain scope published2026-11-14
api.alma.vcs.electronics.sony.comapiNo domain scope published2026-11-14
capture.alma.vcs.electronics.sony.comNo domain scope published2026-11-14
placeholder-capture.alma.vcs.electronics.sony.comNo domain scope published2026-11-14
proxy-api.alma.vcs.electronics.sony.comapiNo domain scope published2026-11-14
render.alma.vcs.electronics.sony.comNo domain scope published2026-11-14
render-api.alma.vcs.electronics.sony.comapiNo domain scope published2026-11-14
api.vcs.electronics.sony.comapiNo domain scope published2026-11-14
capture.vcs.electronics.sony.comNo domain scope published2026-11-14
placeholder-capture.dalma.vcs.electronics.sony.comNo domain scope published2026-11-14
render.dalma.vcs.electronics.sony.comNo domain scope published2026-11-14
render-api.dalma.vcs.electronics.sony.comapiNo domain scope published2026-11-14
render.dev.vcs.electronics.sony.comdevNo domain scope published2026-11-14
api.nsu.vcs.electronics.sony.comapiNo domain scope published2026-11-14
proxy-api.nsu.vcs.electronics.sony.comapiNo domain scope published2026-11-14
render.nsu.vcs.electronics.sony.comNo domain scope published2026-11-14
render-api.nsu.vcs.electronics.sony.comapiNo domain scope published2026-11-14
vpc-link-api.nsu.vcs.electronics.sony.comapiNo domain scope published2026-11-14
placeholder-capture.vcs.electronics.sony.comNo domain scope published2026-11-14
proxy-api.vcs.electronics.sony.comapiNo domain scope published2026-11-14
render.qa.vcs.electronics.sony.comtestNo domain scope published2026-11-14
render.alma.redirect.vcs.electronics.sony.comNo domain scope published2026-11-14
render.nsu.redirect.vcs.electronics.sony.comNo domain scope published2026-11-14
render.vcs.electronics.sony.comNo domain scope published2026-11-14
render-api.vcs.electronics.sony.comapiNo domain scope published2026-11-14
vpc-link-api.vcs.electronics.sony.comapiNo domain scope published2026-11-14
www.electronics.sony.comNo domain scope published2026-11-14
empdir.sony.comNo domain scope published2026-11-14
empdir-dev.sony.comdevNo domain scope published2026-11-14
enterprise.sony.comNo domain scope published2026-11-14
enterpriseqa.sony.comNo domain scope published2026-11-14
enterprisestg.sony.comNo domain scope published2026-11-14
eservice.sony.comNo domain scope published2026-11-14
totqa.eservice.sony.comNo domain scope published2026-11-14
eserviceprod.sony.comNo domain scope published2026-11-14
eserviceqa.sony.comNo domain scope published2026-11-14
eservicestg.sony.comNo domain scope published2026-11-14
esupport.sony.comNo domain scope published2026-11-14
admin.esupport.sony.comadminNo domain scope published2026-11-14
br.esupport.sony.comNo domain scope published2026-11-14
ca.esupport.sony.comNo domain scope published2026-11-14
content.esupport.sony.comNo domain scope published2026-11-14
dev.esupport.sony.comdevNo domain scope published2026-11-14
docs.esupport.sony.comNo domain scope published2026-11-14
la.esupport.sony.comNo domain scope published2026-11-14
qa.esupport.sony.comtestNo domain scope published2026-11-14
s01.esupport.sony.comNo domain scope published2026-11-14
stage.esupport.sony.comstagingNo domain scope published2026-11-14
us.esupport.sony.comNo domain scope published2026-11-14
www.esupport.sony.comNo domain scope published2026-11-14
ets.sony.comNo domain scope published2026-11-14
eu.sony.comNo domain scope published2026-11-14
15gms-netbox.eu.sony.comNo domain scope published2026-11-14
adfs.eu.sony.comauthNo domain scope published2026-11-14
www.adfs.eu.sony.comauthNo domain scope published2026-11-14
anz.eu.sony.comNo domain scope published2026-11-14
ausiesurapp11.anz.eu.sony.comNo domain scope published2026-11-14
ausiesurapp20.anz.eu.sony.comNo domain scope published2026-11-14
ausiesurutil02.anz.eu.sony.comNo domain scope published2026-11-14
ausiesurvc01.anz.eu.sony.comNo domain scope published2026-11-14
ausiesydapp01.anz.eu.sony.comNo domain scope published2026-11-14
ausiesurvc01.eu.sony.comNo domain scope published2026-11-14
bebruras.eu.sony.comNo domain scope published2026-11-14
bebruras1.eu.sony.comNo domain scope published2026-11-14
biostar.eu.sony.comNo domain scope published2026-11-14
bis.eu.sony.comNo domain scope published2026-11-14
bis-dev.eu.sony.comdevNo domain scope published2026-11-14
bis-test.eu.sony.comtestNo domain scope published2026-11-14
bis-uat.eu.sony.comtestNo domain scope published2026-11-14
arch-test.bis.eu.sony.comtestNo domain scope published2026-11-14
brl.eu.sony.comNo domain scope published2026-11-14
bustlsupdate.eu.sony.comNo domain scope published2026-11-14
bustlsupdate-uat.eu.sony.comtestNo domain scope published2026-11-14
ca-swarm.eu.sony.comNo domain scope published2026-11-14
ccesnyc1cuic1.eu.sony.comNo domain scope published2026-11-14
ccesnyc1cuic1-ec.eu.sony.comNo domain scope published2026-11-14
ccesnyc1cuic1-ec-ms.eu.sony.comNo domain scope published2026-11-14
www.ccesnyc1cuic1-ec.eu.sony.comNo domain scope published2026-11-14
www.ccesnyc1cuic1.eu.sony.comNo domain scope published2026-11-14
ccesnyc1cuic2.eu.sony.comNo domain scope published2026-11-14
ccesnyc1cuic2-ec.eu.sony.comNo domain scope published2026-11-14
ccesnyc1cuic2-ec-ms.eu.sony.comNo domain scope published2026-11-14
www.ccesnyc1cuic2-ec.eu.sony.comNo domain scope published2026-11-14
www.ccesnyc1cuic2.eu.sony.comNo domain scope published2026-11-14
ccesnyc1fns1.eu.sony.comNo domain scope published2026-11-14
www.ccesnyc1fns1.eu.sony.comNo domain scope published2026-11-14
ccesnyc1fns2.eu.sony.comNo domain scope published2026-11-14
www.ccesnyc1fns2.eu.sony.comNo domain scope published2026-11-14
ccesnyc1hds1.eu.sony.comNo domain scope published2026-11-14
www.ccesnyc1hds1.eu.sony.comNo domain scope published2026-11-14
ccesnyc1hds2.eu.sony.comNo domain scope published2026-11-14
www.ccesnyc1hds2.eu.sony.comNo domain scope published2026-11-14
ccesnyc1rec1.eu.sony.comNo domain scope published2026-11-14
www.ccesnyc1rec1.eu.sony.comNo domain scope published2026-11-14
ccesnyc1rec2.eu.sony.comNo domain scope published2026-11-14
www.ccesnyc1rec2.eu.sony.comNo domain scope published2026-11-14
ccesnyc1ucm1.eu.sony.comNo domain scope published2026-11-14
www.ccesnyc1ucm1.eu.sony.comNo domain scope published2026-11-14
ccesnyc1ucm2.eu.sony.comNo domain scope published2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated