Skip to content
Connect AISign inSign up free

Bug bounty program

UB

Uber

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
4
Disclosed reports
239
Subdomains
11,395
Vendor on CyberSIXT
Uber (4 CVEs, 0 exploited)

Most upvoted reports239

All reports
Most upvoted reports of Uber
ReportWeaknessDisclosedBountyVotes
Sensitive user information disclosure at bonjour.uber.com/marketplace/_rpc via the 'userUuid' parameterAnalysed#542340Information Disclosure2019-09-09–643
[Pre-Submission][H1-4420-2019] API access to Phabricator on code.uberinternal.com from leaked certificate in git repoAnalysed#591813Information Disclosure2021-02-25$40,000458
Chained Bugs to Leak Victim's Uber's FB Oauth TokenAnalysed#202781Authentication2019-01-25–427
Reflected XSS and sensitive data exposure, including payment details, on lioncityrentals.com.sgAnalysed#340431Cryptography2020-04-30$4,000376
RCE via npm misconfig -- installing internal libraries from the public registryAnalysed#1007014Command and Code Injection2021-02-24$9,000325
Change any Uber user's password through /rt/users/passwordless-signup - Account Takeover (critical)Analysed#143717Authentication2016-07-14–312
XSS At "pages.et.uber.com"#156098Cross-site Scripting2016-08-19–267
Stored XSS in developer.uber.comAnalysed#131450Cross-site Scripting2016-06-27$7,500223
Unauthorized access to █████████.com allows access to Uber Brazil tax documents and system.Analysed#530441Access Control2021-03-06$4,500210
Authentication bypass on auth.uber.com via subdomain takeover of saostatic.uber.comAnalysed#219205Authentication2017-07-13–183

Subdomains11,395

Root:uber.com
Scope
Name suggests
First seen
Text fileClear filters11,395 names
Subdomains of Uber
NameScopeFirst seen
carlos.dev.uber.comdevNot in the scope2026-11-14
carlos0.dev.uber.comdevNot in the scope2026-11-14
carlos1.dev.uber.comdevNot in the scope2026-11-14
carlos3.dev.uber.comdevNot in the scope2026-11-14
caroline.dev.uber.comdevNot in the scope2026-11-14
caroline-epeius.dev.uber.comdevNot in the scope2026-11-14
caroline-fmn.dev.uber.comdevNot in the scope2026-11-14
caroline-forget.dev.uber.comdevNot in the scope2026-11-14
caroline-forgetmenot.dev.uber.comdevNot in the scope2026-11-14
caroline-golden0304.dev.uber.comdevNot in the scope2026-11-14
caroline-muberfresh.dev.uber.comdevNot in the scope2026-11-14
caroline-web.dev.uber.comdevNot in the scope2026-11-14
caroline2.dev.uber.comdevNot in the scope2026-11-14
carrots.dev.uber.comdevNot in the scope2026-11-14
carrots-db-improvement.dev.uber.comdata, devNot in the scope2026-11-14
carrots-vipul.dev.uber.comdevNot in the scope2026-11-14
cascade.dev.uber.comdevNot in the scope2026-11-14
cascade-staging.dev.uber.comdev, stagingNot in the scope2026-11-14
cascaderules-staging.dev.uber.comdev, stagingNot in the scope2026-11-14
casen.dev.uber.comdevNot in the scope2026-11-14
caspersj.dev.uber.comdevNot in the scope2026-11-14
caspersj1.dev.uber.comdevNot in the scope2026-11-14
caspersj2.dev.uber.comdevNot in the scope2026-11-14
caspersj3.dev.uber.comdevNot in the scope2026-11-14
caspersjbase.dev.uber.comdevNot in the scope2026-11-14
caterpie.dev.uber.comdevNot in the scope2026-11-14
catrev.dev.uber.comdevNot in the scope2026-11-14
catriona.dev.uber.comdevNot in the scope2026-11-14
catstonaut.dev.uber.comdevNot in the scope2026-11-14
cayanne222.dev.uber.comdevNot in the scope2026-11-14
cayman222.dev.uber.comdevNot in the scope2026-11-14
cbradfield.dev.uber.comdevNot in the scope2026-11-14
cbradfield0.dev.uber.comdevNot in the scope2026-11-14
cbradfield02.dev.uber.comdevNot in the scope2026-11-14
cbuisson.dev.uber.comdevNot in the scope2026-11-14
ccc.dev.uber.comdevNot in the scope2026-11-14
cccgolden10.dev.uber.comdevNot in the scope2026-11-14
ccog1.dev.uber.comdevNot in the scope2026-11-14
ceder.dev.uber.comdevNot in the scope2026-11-14
ceder2.dev.uber.comdevNot in the scope2026-11-14
cem-dev-1.dev.uber.comdevNot in the scope2026-11-14
cerebro.dev.uber.comdevNot in the scope2026-11-14
cerebro-supply.dev.uber.comdevNot in the scope2026-11-14
cerebro-testing.dev.uber.comdev, testNot in the scope2026-11-14
cgibbs.dev.uber.comdevNot in the scope2026-11-14
cgibbs0.dev.uber.comdevNot in the scope2026-11-14
cgibbs2.dev.uber.comdevNot in the scope2026-11-14
cgibbs3.dev.uber.comdevNot in the scope2026-11-14
ch.dev.uber.comdevNot in the scope2026-11-14
chao.dev.uber.comdevNot in the scope2026-11-14
chao-dev0.dev.uber.comdevNot in the scope2026-11-14
chao-dev1.dev.uber.comdevNot in the scope2026-11-14
chao-dev2.dev.uber.comdevNot in the scope2026-11-14
chao-dev3.dev.uber.comdevNot in the scope2026-11-14
chao-dev4.dev.uber.comdevNot in the scope2026-11-14
chao0.dev.uber.comdevNot in the scope2026-11-14
chariots.dev.uber.comdevNot in the scope2026-11-14
chariots-staging.dev.uber.comdev, stagingNot in the scope2026-11-14
charizard.dev.uber.comdevNot in the scope2026-11-14
charles.dev.uber.comdevNot in the scope2026-11-14
charles-ec2.dev.uber.comdevNot in the scope2026-11-14
charmander.dev.uber.comdevNot in the scope2026-11-14
charmeleon.dev.uber.comdevNot in the scope2026-11-14
chee.dev.uber.comdevNot in the scope2026-11-14
chen2.dev.uber.comdevNot in the scope2026-11-14
cheng.dev.uber.comdevNot in the scope2026-11-14
chenjin.dev.uber.comdevNot in the scope2026-11-14
cherami-builder.dev.uber.comdevNot in the scope2026-11-14
chetan.dev.uber.comdevNot in the scope2026-11-14
cheung.dev.uber.comdevNot in the scope2026-11-14
cheung0.dev.uber.comdevNot in the scope2026-11-14
cheung3.dev.uber.comdevNot in the scope2026-11-14
chevrolet-500sec-5.dev.uber.comdevNot in the scope2026-11-14
chevrolet-7-series-4.dev.uber.comdevNot in the scope2026-11-14
chevrolet-a4-5.dev.uber.comdevNot in the scope2026-11-14
chevrolet-a6-6.dev.uber.comdevNot in the scope2026-11-14
chevrolet-achieva-3.dev.uber.comdevNot in the scope2026-11-14
chevrolet-aerostar-3.dev.uber.comdevNot in the scope2026-11-14
chevrolet-amg-3.dev.uber.comdevNot in the scope2026-11-14
chevrolet-aries-5.dev.uber.comdevNot in the scope2026-11-14
chevrolet-armada-8.dev.uber.comdevNot in the scope2026-11-14
chevrolet-arnage-6.dev.uber.comdevNot in the scope2026-11-14
chevrolet-astro-6.dev.uber.comdevNot in the scope2026-11-14
chevrolet-avalanche-5.dev.uber.comdevNot in the scope2026-11-14
chevrolet-canyon-5.dev.uber.comdevNot in the scope2026-11-14
chevrolet-caravan-2.dev.uber.comdevNot in the scope2026-11-14
chevrolet-classic-1.dev.uber.comdev, legacyNot in the scope2026-11-14
chevrolet-cordia-7.dev.uber.comdevNot in the scope2026-11-14
chevrolet-crosstour-5.dev.uber.comdevNot in the scope2026-11-14
chevrolet-crown-7.dev.uber.comdevNot in the scope2026-11-14
chevrolet-doofwagon-7.dev.uber.comdevNot in the scope2026-11-14
chevrolet-element-4.dev.uber.comdevNot in the scope2026-11-14
chevrolet-evolution-9.dev.uber.comdevNot in the scope2026-11-14
chevrolet-hhr-5.dev.uber.comdevNot in the scope2026-11-14
chevrolet-impreza-wrx-8.dev.uber.comdevNot in the scope2026-11-14
chevrolet-intrigue-5.dev.uber.comdevNot in the scope2026-11-14
chevrolet-jimmy-6.dev.uber.comdevNot in the scope2026-11-14
chevrolet-justy-1.dev.uber.comdevNot in the scope2026-11-14
chevrolet-justy-9.dev.uber.comdevNot in the scope2026-11-14
chevrolet-lemans-4.dev.uber.comdevNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated