HexBrain
Sign in

Browse / MercadoLibre

MercadoLibre

6disclosed reports
385known subdomains

See its reports on the map

Attack surface: 385 known subdomains

asgemsrs1-int-prdapibalotocitiportalcontentdatadevelopersencuestasglobal-selli…jobsm-int-devm-int-prdm-pub-devprodengprodeng-inte…prodeng-play…prodeng-play…s1-int-devs1-pub-devs2-int-prdsandboxsellersservicedesk

385subdomains across 1 root domain

All subdomainsLoading…
    Download all 385

    Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

    What gets reported to MercadoLibre

    Most upvoted reports

    AllValidInformativeN/ADuplicate

    1. Sale cancellations from other sellers without restrictionsInsecure Direct Object Reference (IDOR) · critical
      144 votes
    2. Stored Cross-Site Scripting in mercadopago.com.arCross-site Scripting (XSS) - Stored · high
      109 votes
    3. Stored XSS in reclamosCross-site Scripting (XSS) - Stored · high
      97 votes
    4. Account Takeover / Arbitrary File read and deletion / Partial code execution (intent redirection)Code Injection · high
      66 votes
    5. Reflected Cross Site ScriptingCross-site Scripting (XSS) - Reflected · medium
      42 votes
    6. Es posible poder navegar a cualquier pagina en Point Smart applicationlow
      41 votes