← 返回地图破甲

浏览报告

仅含 CVE

128 份报告 · 本页赏金 $19,100 · 清除筛选

Attacker shall recieve order updates on whatsapp for users who have activated whatsapp notification业务逻辑Eternal低危—2022-04-06 Race condition in User comments Likes业务逻辑Eternal低危—2022-02-09 Add upto 10K rupees to a wallet by paying an arbitrary amount业务逻辑Eternal中危$2,0002022-02-23 Claiming the listing of a non-delivery restaurant through OTP manipulation访问控制Eternal高危$3,2502022-02-22 Subdomain takeover of fr1.vpn.zomans.com业务逻辑Eternal低危$3502021-09-17 subdomain takeover on fddkim.zomato.com访问控制Eternal低危—2022-01-27 SQL Injection in www.hyperpure.com代码执行Eternal高危$2,0002021-02-22 Improper Validation at Partners Login身份认证Eternal高危$2,0002021-10-06 [api.zomato.com] Abusing LocalParams (city_id) to Inject SOLR query注入与走私Eternal低危$1502020-08-11 Solr Injection in `user_id` parameter at :/v2/leaderboard_v2.jsonSQL 注入Eternal高危$2,0002020-08-10 Lack of Password Confirmation for Account Deletion错误配置Eternal低危—2020-08-11 Availing Zomato gold by using a random third-party `wallet_id`业务逻辑Eternal高危$2,0002020-08-07 Ability to manipulate price with a max threshold of `<1 Rupee` in support rider parameter错误配置Eternal低危—2020-08-08 The vulnerabilities found were XSS, Public disclosure, Network enumeration via CSRF, DLL hijacking.跨站请求伪造Eternal未评级—2020-07-21 Page has a link to google drive which has logos and a few customer phone recordings信息泄露Eternal低危$2002022-02-21 [www.zomato.com] Abusing LocalParams (city) to Inject SOLR querySQL 注入Eternal低危$1002020-08-10 [www.zomato.com] Blind SQL Injection in /php/geto2bannerSQL 注入Eternal高危$2,0002020-08-10 [www.zomato.com] Blind SQL Injection in /php/widgets_handler.phpSQL 注入Eternal高危$2,0002020-08-10 Mathematical error found in meals for one业务逻辑Eternal低危—2020-04-29 Stealing Zomato X-Access-Token: in Bulk using HTTP Request Smuggling on api.zomato.com注入与走私Eternal高危—2020-07-09 Free food bug done by burp suite密码学缺陷Eternal低危—2019-12-26 Zomato Map server going out of memory while resizing map image内存破坏Eternal低危—2019-12-05 HTML injection leads to reflected XSS代码执行Eternal低危$1502021-09-07 HTML Injection @ /[restaurant]/order endpoint.跨站脚本Eternal低危$1502021-09-07 [www.zomato.com] Blind XSS on one of the Admin Dashboard跨站脚本Eternal中危$7502019-11-19