Browse / Glovo

Glovo

See its reports on the map

What gets reported to Glovo

• Cross-site Scripting2
• Information Disclosure2
• Access Control1
• Memory Corruption1
• Code Execution1
• Authentication1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Getting a free delivery by singing up from "[email protected]"Privilege Escalation · medium
   41 votes
2. Moodle XSS on evolve.glovoapp.comCross-site Scripting (XSS) - Reflected · medium
   41 votes
3. Reflected XSS on delivery.glovoapp.comCross-site Scripting (XSS) - Reflected · medium
   32 votes
4. Integer overflow vulnerability Integer Overflow · critical
   29 votes
5. Server Side Template Injection on Name parameter during Sign Up processCode Injection · high
   28 votes
6. Django debug enabled showing information about system, database, configuration filesInformation Disclosure · medium
   25 votes
7. Exposed valid AWS, Mysql, Sendgrid and other secretsUse of Hard-coded Credentials · critical
   23 votes
8. chainning bugs to get full disclosure of Users addresses Information Disclosure · medium
   17 votes