Skip to content
Connect AISign inSign up free

Bug bounty program

SO

Sony

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
1
Disclosed reports
14
Subdomains
13,535
Vendor on CyberSIXT
Sony (79 CVEs, 0 exploited)

Most upvoted reports14

All reports
Most upvoted reports of Sony
ReportWeaknessDisclosedBountyVotes
DLL side-loading vulnerability in Sony Music Center for PC Ver. 2.7.2 (Latest version)Analysed#3355766File and Path Handling2026-06-05–109
SQL Injection at https://████ via ███ parameterAnalysed#1935151SQL Injection2023-04-24–74
明確な認証不備および潜在的な中間者攻撃の可能性（Clear Authentication Deficiencies & Potential for Man-in-the-Middle Attacks）Analysed#2642615Cryptography2025-07-08–71
Improper State Validation on Sony WH-CH520 via BLE Command Service leads to unauthorized Bluetooth pairing and audio hijacking#3514490No weakness recorded––67
SQL injection at ███████Analysed#2256032SQL Injection2024-01-24–63
SSRF on http://www.███████/crossdomain.php via url parameterAnalysed#971590Server-Side Request Forgery2022-10-06–42
Remote Code Execution (RCE) in a Sony WebSystemAnalysed#329572Deserialization and Object Injection2019-01-23–40
Path Traversal issue at https://████/blaze/Analysed#1320084File and Path Handling2022-10-06–40
LFI at http://www.████Analysed#986380Command and Code Injection2022-12-16–37
Blind User-Agent SQL Injection to Blind Remote OS Command Execution at █████████Analysed#1339430Command and Code Injection2022-07-06–26

Subdomains13,535

Root
Scope
Name suggests
First seen
Text file13,535 names
Subdomains of Sony
NameScopeFirst seen
usculfltpmo01.am.sony.comNo domain scope published2026-11-14
usculfltpmo02.am.sony.comNo domain scope published2026-11-14
usculfmsqldbtest.am.sony.comNo domain scope published2026-11-14
usculfmw01v.am.sony.comNo domain scope published2026-11-14
usculfmw02v.am.sony.comNo domain scope published2026-11-14
usculfwm01v.am.sony.comNo domain scope published2026-11-14
usculfwm02v.am.sony.comNo domain scope published2026-11-14
usculgdcwcrits01.am.sony.comNo domain scope published2026-11-14
usculgdcwfecms01.am.sony.comNo domain scope published2026-11-14
usculgdcwsplsr01.am.sony.comNo domain scope published2026-11-14
usculgsirtapps.am.sony.comNo domain scope published2026-11-14
usculidopdmz01v.am.sony.comNo domain scope published2026-11-14
usculidopgitlab02v.am.sony.comNo domain scope published2026-11-14
usculidopjenkins01v.am.sony.comNo domain scope published2026-11-14
usculidopreport03v.am.sony.comNo domain scope published2026-11-14
usculiiqbchp01v.am.sony.comNo domain scope published2026-11-14
usculiiqbchp02v.am.sony.comNo domain scope published2026-11-14
usculiiqdbap01.am.sony.comNo domain scope published2026-11-14
usculiiqdbap01a.am.sony.comNo domain scope published2026-11-14
usculiiqdbap01b.am.sony.comNo domain scope published2026-11-14
usculiiqdbap01c.am.sony.comNo domain scope published2026-11-14
usculiiqiqsp.am.sony.comNo domain scope published2026-11-14
usculiiqiqsp01v.am.sony.comNo domain scope published2026-11-14
usculiiqiqsp02v.am.sony.comNo domain scope published2026-11-14
usculiiqiqsq.am.sony.comNo domain scope published2026-11-14
usculiiqiqsq01v.am.sony.comNo domain scope published2026-11-14
usculiiqiqsq02v.am.sony.comNo domain scope published2026-11-14
usculiiqpwdp01v.am.sony.comNo domain scope published2026-11-14
usculiiqpwdp02v.am.sony.comNo domain scope published2026-11-14
usculiiquixp01v.am.sony.comNo domain scope published2026-11-14
usculiiquixp02v.am.sony.comNo domain scope published2026-11-14
usculintapp01v.am.sony.comNo domain scope published2026-11-14
usculjenkinsdev01v.am.sony.comNo domain scope published2026-11-14
usculjfrogsnd02v.am.sony.comNo domain scope published2026-11-14
usculldp01vp2v.am.sony.comNo domain scope published2026-11-14
usculldp02vp2v.am.sony.comNo domain scope published2026-11-14
usculldp03v_p2v.am.sony.comNo domain scope published2026-11-14
usculldp04v_p2v.am.sony.comNo domain scope published2026-11-14
usculldp06v_p2v.am.sony.comNo domain scope published2026-11-14
usculldp07v_p2v.am.sony.comNo domain scope published2026-11-14
uscullieweb01v.am.sony.comNo domain scope published2026-11-14
uscullieweb02v.am.sony.comNo domain scope published2026-11-14
uscullieweb03v.am.sony.comNo domain scope published2026-11-14
usculnitesm2a.am.sony.comNo domain scope published2026-11-14
usculoffapp.am.sony.comNo domain scope published2026-11-14
usculoffapp-dev.am.sony.comdevNo domain scope published2026-11-14
usculoffapp-qa.am.sony.comtestNo domain scope published2026-11-14
usculofftxd01v.am.sony.comNo domain scope published2026-11-14
usculofftxp01v.am.sony.comNo domain scope published2026-11-14
usculora01v.am.sony.comNo domain scope published2026-11-14
usculpaqmapp01v.am.sony.comNo domain scope published2026-11-14
usculpaqmapp02v.am.sony.comNo domain scope published2026-11-14
usculpaqmapp03v.am.sony.comNo domain scope published2026-11-14
usculpaqmapp04v.am.sony.comNo domain scope published2026-11-14
usculpaqmapp05v.am.sony.comNo domain scope published2026-11-14
usculpmo-vip.am.sony.comNo domain scope published2026-11-14
usculpmo01.am.sony.comNo domain scope published2026-11-14
usculqlikapp02.am.sony.comNo domain scope published2026-11-14
usculqlikapp03.am.sony.comNo domain scope published2026-11-14
usculremtw01v.am.sony.comNo domain scope published2026-11-14
usculreportsnd03v.am.sony.comNo domain scope published2026-11-14
usculrsa01.am.sony.comNo domain scope published2026-11-14
usculrsa02.am.sony.comNo domain scope published2026-11-14
usculscajump01.am.sony.comNo domain scope published2026-11-14
usculsmehx01.am.sony.comNo domain scope published2026-11-14
usculsndmail01v.am.sony.comNo domain scope published2026-11-14
usculsndmail02v.am.sony.comNo domain scope published2026-11-14
usculsndmail03v.am.sony.comNo domain scope published2026-11-14
usculsndmail04v.am.sony.comNo domain scope published2026-11-14
usculsolwapp01v.am.sony.comNo domain scope published2026-11-14
usculsprig01.am.sony.comNo domain scope published2026-11-14
usculsqllie01v.am.sony.comNo domain scope published2026-11-14
usculsqllie02v.am.sony.comNo domain scope published2026-11-14
usculsqlss18v.am.sony.comNo domain scope published2026-11-14
usculsqlst02.am.sony.comNo domain scope published2026-11-14
usculsqltxd01v.am.sony.comNo domain scope published2026-11-14
usculsqsh01pv.am.sony.comNo domain scope published2026-11-14
uscultanap01.am.sony.comNo domain scope published2026-11-14
uscultaxapp04v.am.sony.comNo domain scope published2026-11-14
www.uscultaxapp04v.am.sony.comNo domain scope published2026-11-14
uscultmrsapd02v.am.sony.comNo domain scope published2026-11-14
uscultrp01v.am.sony.comNo domain scope published2026-11-14
usculvagdcwccsg01.am.sony.comNo domain scope published2026-11-14
usculvordsm01.am.sony.comNo domain scope published2026-11-14
usculvordsm02.am.sony.comNo domain scope published2026-11-14
usculwebmsqld2c.am.sony.comNo domain scope published2026-11-14
usculwebmsqlp2c.am.sony.comNo domain scope published2026-11-14
usculwinjmp01.am.sony.comNo domain scope published2026-11-14
usculwsgpp01v.am.sony.comNo domain scope published2026-11-14
usculwsgpp02v.am.sony.comNo domain scope published2026-11-14
usculxcas01v.am.sony.comNo domain scope published2026-11-14
usculxcas02v.am.sony.comNo domain scope published2026-11-14
usculxcas03v.am.sony.comNo domain scope published2026-11-14
usculxcas04v.am.sony.comNo domain scope published2026-11-14
usculxcas05v.am.sony.comNo domain scope published2026-11-14
usculxcas06v.am.sony.comNo domain scope published2026-11-14
usculxcas07v.am.sony.comNo domain scope published2026-11-14
usculxcas08v.am.sony.comNo domain scope published2026-11-14
usculxcas09v.am.sony.comNo domain scope published2026-11-14
usculxcas10v.am.sony.comNo domain scope published2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated