vulns.co
/
GKData.io MCP

HackerOne · 3 min read

MercadoLibre

Paid Bounty

Open current program Scope capture

What this record establishes

Scope capture

Published asset rows were captured. The full policy and eligibility were not individually reviewed.

Directory row 168; Active program checkbox checked; Bounties minimum displayed $100. Positive displayed minimum supports paid bounty listing. Policy and live submission availability unverified.

Published asset scope

Snapshot captured 2026-10-03. Scope status: Captured.

In scope · 76 published rows
AssetTypeGroup / eligibility
*.adminml.comWILDCARDBounty eligible: Yes
*.mercadolibre.clWILDCARDBounty eligible: Yes
*.mercadolibre.comWILDCARDBounty eligible: Yes
*.mercadolibre.com.arWILDCARDBounty eligible: Yes
*.mercadolibre.com.coWILDCARDBounty eligible: Yes
*.mercadolibre.com.mxWILDCARDBounty eligible: Yes
*.mercadolibre.com.peWILDCARDBounty eligible: Yes
*.mercadolibre.com.uyWILDCARDBounty eligible: Yes
*.mercadolivre.com.brWILDCARDBounty eligible: Yes
*.mercadopago.clWILDCARDBounty eligible: Yes
*.mercadopago.comWILDCARDBounty eligible: Yes
*.mercadopago.com.arWILDCARDBounty eligible: Yes
*.mercadopago.com.brWILDCARDBounty eligible: Yes
*.mercadopago.com.coWILDCARDBounty eligible: Yes
*.mercadopago.com.mxWILDCARDBounty eligible: Yes
*.mercadopago.com.peWILDCARDBounty eligible: Yes
*.mercadopago.com.uyWILDCARDBounty eligible: Yes
*.mlstatic.comWILDCARDBounty eligible: Yes
api.mercadopago.comURLBounty eligible: Yes
api.mercadolibre.comURLBounty eligible: Yes
logistica.redelcom.clURLBounty eligible: Yes
www.mercadolibre.co.crURLBounty eligible: Yes
www.mercadolibre.com.boURLBounty eligible: Yes
www.mercadolibre.com.doURLBounty eligible: Yes
www.mercadolibre.com.ecURLBounty eligible: Yes
www.mercadolibre.com.gtURLBounty eligible: Yes
www.mercadolibre.com.hnURLBounty eligible: Yes
www.mercadolibre.com.niURLBounty eligible: Yes
www.mercadolibre.com.paURLBounty eligible: Yes
www.mercadolibre.com.pyURLBounty eligible: Yes
www.mercadolibre.com.svURLBounty eligible: Yes
www.mercadolivre.comURLBounty eligible: Yes
www.mercadopago.com.ecURLBounty eligible: Yes
biolibre.arURLBounty eligible: Yes
biolibre.clURLBounty eligible: Yes
biolibre.coURLBounty eligible: Yes
biolibre.mxURLBounty eligible: Yes
biolivre.com.brURLBounty eligible: Yes
meliplay.com.arURLBounty eligible: Yes
meliplay.com.peURLBounty eligible: Yes
meliplay.com.uyURLBounty eligible: Yes
mercadoplay.coURLBounty eligible: Yes
mercadoplay.com.peURLBounty eligible: Yes
mercadoplay.com.uyURLBounty eligible: Yes
mercadoplay.peURLBounty eligible: Yes
mercadoplay.uyURLBounty eligible: Yes
portalinmobiliario.clURLBounty eligible: Yes
portalinmobiliario.comURLBounty eligible: Yes
tucarro.comURLBounty eligible: Yes
tucarro.com.coURLBounty eligible: Yes
tumoto.comURLBounty eligible: Yes
furycloud.ioURLBounty eligible: Yes
furydocs.ioURLBounty eligible: Yes
sustentabilidadmercadolibre.com/URLBounty eligible: Yes
mercadopago.com.veURLBounty eligible: Yes
mpago.liURLBounty eligible: Yes
mpago.laURLBounty eligible: Yes
mercadobackoffice.comURLBounty eligible: Yes
CryptoOTHERBounty eligible: Yes
Tier 3OTHERBounty eligible: Yes
WonderOTHERBounty eligible: Yes
Leaked CredentialsOTHERBounty eligible: Yes
Point SmartHARDWAREBounty eligible: Yes
com.mercadopago.walletGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.mercadolibreGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.mercadoenvios.driverGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.mercadoenvios.crowdsourcingGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.mercadoenvios.logisticsGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.mercadolibre.android.mplay_tvGOOGLE_PLAY_APP_IDBounty eligible: Yes
com.mercadopago.MercadoPagoAPPLE_STORE_APP_IDBounty eligible: Yes
com.3mosquitos.MercadoLibreAPPLE_STORE_APP_IDBounty eligible: Yes
*.tucarro.com.veWILDCARDBounty eligible: No
*.mercadolibre.com.veWILDCARDBounty eligible: No
mercadolibreexperience.com.*WILDCARDBounty eligible: No
mercadoenvios.com.veURLBounty eligible: No
www.ipbooster.comURLBounty eligible: No
Out of scope · 9 published rows
AssetTypeGroup / eligibility
*.kangu.com.brWILDCARDBounty eligible: No
*.gokangu.clWILDCARDBounty eligible: No
*.gokangu.coWILDCARDBounty eligible: No
*.gokangu.mxWILDCARDBounty eligible: No
*.gokangu.uyWILDCARDBounty eligible: No
*.kangu.techWILDCARDBounty eligible: No
wow-int.mercadolibre.comURLBounty eligible: No
developersforumOTHERBounty eligible: No
RedelcomOTHERBounty eligible: No

Capture limits

  • Only the published asset table was captured; program rules and eligibility still require individual review.

Live policy and platform eligibility still require review.

Sources and collection identity

  1. Official program page Primary source · reviewed 2026-10-03
  2. Published scope source Primary source · reviewed 2026-10-03

Appears in Discovery, Bounty. No identity match is inferred from a shared company name.

GitHub snapshot 2026-10-04

d5550c789111 · JSON exports & schemas · CC BY 4.0 content / MIT software