Eternal · disclosed reports
No weakness filed
10 disclosed reports · $1,300 paid
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. Reports open on HackerOne.
Open Eternal on HackerOne- reports
- 10
- paid a bounty
- 2
Every one of the 10 is a mark on the map. Named now: 1 to 10, most upvoted first.
- [www.zomato.com] CORS Misconfiguration, could lead to disclosure of sensitive information
- [Zomato Order] Insecure deeplink leads to sensitive information disclosure
- [Zomato Android/iOS] Theft of user session
- [Zomato for Business Android] Vulnerability in exported activity WebView
- CORS Misconfiguration on www.zomato.com
- [www.zomato.com] Abusing LocalParams to Inject Code through ███████ query
- Restaurant payment information leakage
- takeover a lot of accounts
- [www.zomato.com] Getting a complimentary dessert [Zomato Treats] on ordering a Meal at no cost
- CSS
paid a bounty
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.