Skip to content
Connect AISign inSign up free

Bug bounty program

UB

Uber

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
4
Disclosed reports
239
Subdomains
11,395

Most upvoted reports239

All reports
Most upvoted reports of Uber
ReportWeaknessDisclosedBountyVotes
Sensitive user information disclosure at bonjour.uber.com/marketplace/_rpc via the 'userUuid' parameterAnalysed#542340Information Disclosure2019-09-09–643
[Pre-Submission][H1-4420-2019] API access to Phabricator on code.uberinternal.com from leaked certificate in git repoAnalysed#591813Information Disclosure2021-02-25$40,000458
Chained Bugs to Leak Victim's Uber's FB Oauth TokenAnalysed#202781Authentication2019-01-25–427
Reflected XSS and sensitive data exposure, including payment details, on lioncityrentals.com.sgAnalysed#340431Cryptography2020-04-30$4,000376
RCE via npm misconfig -- installing internal libraries from the public registryAnalysed#1007014Command and Code Injection2021-02-24$9,000325
Change any Uber user's password through /rt/users/passwordless-signup - Account Takeover (critical)Analysed#143717Authentication2016-07-14–312
XSS At "pages.et.uber.com"#156098Cross-site Scripting2016-08-19–267
Stored XSS in developer.uber.comAnalysed#131450Cross-site Scripting2016-06-27$7,500223
Unauthorized access to █████████.com allows access to Uber Brazil tax documents and system.Analysed#530441Access Control2021-03-06$4,500210
Authentication bypass on auth.uber.com via subdomain takeover of saostatic.uber.comAnalysed#219205Authentication2017-07-13–183

Subdomains11,395

Root
Scope
Name suggests
First seen
Text file11,395 names
Subdomains of Uber
NameScopeFirst seen
kgalkov0.dev.uber.comdevNot in the scope2026-11-14
kgalkov1.dev.uber.comdevNot in the scope2026-11-14
kgalkov2.dev.uber.comdevNot in the scope2026-11-14
kgalkov3.dev.uber.comdevNot in the scope2026-11-14
kgalkov4.dev.uber.comdevNot in the scope2026-11-14
kgalkov6.dev.uber.comdevNot in the scope2026-11-14
kh.dev.uber.comdevNot in the scope2026-11-14
kh-aws.dev.uber.comdevNot in the scope2026-11-14
kh-mo.dev.uber.comdevNot in the scope2026-11-14
kh1.dev.uber.comdevNot in the scope2026-11-14
khbot.dev.uber.comdevNot in the scope2026-11-14
khg.dev.uber.comdevNot in the scope2026-11-14
kia-164-2.dev.uber.comdevNot in the scope2026-11-14
kia-aerostar-9.dev.uber.comdevNot in the scope2026-11-14
kia-ascender-5.dev.uber.comdevNot in the scope2026-11-14
kia-avanti-2.dev.uber.comdevNot in the scope2026-11-14
kia-beretta-5.dev.uber.comdevNot in the scope2026-11-14
kia-bigfoot-3.dev.uber.comdevNot in the scope2026-11-14
kia-bonneville-3.dev.uber.comdevNot in the scope2026-11-14
kia-brz-6.dev.uber.comdevNot in the scope2026-11-14
kia-catera-1.dev.uber.comdevNot in the scope2026-11-14
kia-compass-8.dev.uber.comdevNot in the scope2026-11-14
kia-daytona-7.dev.uber.comdevNot in the scope2026-11-14
kia-diablo-4.dev.uber.comdevNot in the scope2026-11-14
kia-diamante-5.dev.uber.comdevNot in the scope2026-11-14
kia-elan-4.dev.uber.comdevNot in the scope2026-11-14
kia-focus-7.dev.uber.comdevNot in the scope2026-11-14
kia-hearse-2.dev.uber.comdevNot in the scope2026-11-14
kia-hhr-6.dev.uber.comdevNot in the scope2026-11-14
kia-ion-9.dev.uber.comdevNot in the scope2026-11-14
kia-lacrosse-4.dev.uber.comdevNot in the scope2026-11-14
kia-lfa-6.dev.uber.comdevNot in the scope2026-11-14
kia-lumina-7.dev.uber.comdevNot in the scope2026-11-14
kia-mark-vii-7.dev.uber.comdevNot in the scope2026-11-14
kia-marquis-9.dev.uber.comdevNot in the scope2026-11-14
kia-mini-1.dev.uber.comdevNot in the scope2026-11-14
kia-monterey-8.dev.uber.comdevNot in the scope2026-11-14
kia-nv3500-2.dev.uber.comdevNot in the scope2026-11-14
kia-outback-5.dev.uber.comdevNot in the scope2026-11-14
kia-r-class-7.dev.uber.comdevNot in the scope2026-11-14
kia-ram-van-b250-1.dev.uber.comdevNot in the scope2026-11-14
kia-rendezvous-7.dev.uber.comdevNot in the scope2026-11-14
kia-samurai-9.dev.uber.comdevNot in the scope2026-11-14
kia-sc-8.dev.uber.comdevNot in the scope2026-11-14
kia-sedona-2.dev.uber.comdevNot in the scope2026-11-14
kia-sienna-4.dev.uber.comdevNot in the scope2026-11-14
kia-sierra-8.dev.uber.comdevNot in the scope2026-11-14
kia-trooper-6.dev.uber.comdevNot in the scope2026-11-14
kia-turbo-5.dev.uber.comdevNot in the scope2026-11-14
kia-xtracab-4.dev.uber.comdevNot in the scope2026-11-14
kilgore.dev.uber.comdevNot in the scope2026-11-14
kilgore0.dev.uber.comdevNot in the scope2026-11-14
killah-priest.dev.uber.comdevNot in the scope2026-11-14
kimo.dev.uber.comdevNot in the scope2026-11-14
kinganthonyt.dev.uber.comdevNot in the scope2026-11-14
kinnary-server.dev.uber.comdevNot in the scope2026-11-14
kinnary-team.dev.uber.comdevNot in the scope2026-11-14
kiril.dev.uber.comdevNot in the scope2026-11-14
kittens.dev.uber.comdevNot in the scope2026-11-14
kjangla.dev.uber.comdevNot in the scope2026-11-14
kjangla-dev.dev.uber.comdevNot in the scope2026-11-14
kjangla5.dev.uber.comdevNot in the scope2026-11-14
kk.dev.uber.comdevNot in the scope2026-11-14
kkarim.dev.uber.comdevNot in the scope2026-11-14
klu.dev.uber.comdevNot in the scope2026-11-14
klu0.dev.uber.comdevNot in the scope2026-11-14
klu1.dev.uber.comdevNot in the scope2026-11-14
klu2.dev.uber.comdevNot in the scope2026-11-14
klu3.dev.uber.comdevNot in the scope2026-11-14
klu4.dev.uber.comdevNot in the scope2026-11-14
klu5.dev.uber.comdevNot in the scope2026-11-14
kmantas.dev.uber.comdevNot in the scope2026-11-14
kmantas-jessie.dev.uber.comdevNot in the scope2026-11-14
kobolog.dev.uber.comdevNot in the scope2026-11-14
kodenom.dev.uber.comdevNot in the scope2026-11-14
kohai.dev.uber.comdevNot in the scope2026-11-14
kohlrabi.dev.uber.comdevNot in the scope2026-11-14
kok.dev.uber.comdevNot in the scope2026-11-14
konami.dev.uber.comdevNot in the scope2026-11-14
koya.dev.uber.comdevNot in the scope2026-11-14
kp.dev.uber.comdevNot in the scope2026-11-14
kpflum1.dev.uber.comdevNot in the scope2026-11-14
kpruden0.dev.uber.comdevNot in the scope2026-11-14
kpruden1.dev.uber.comdevNot in the scope2026-11-14
kpruden2.dev.uber.comdevNot in the scope2026-11-14
kpruden4.dev.uber.comdevNot in the scope2026-11-14
kpruden5.dev.uber.comdevNot in the scope2026-11-14
kr.dev.uber.comdevNot in the scope2026-11-14
kr-dev.dev.uber.comdevNot in the scope2026-11-14
kr0.dev.uber.comdevNot in the scope2026-11-14
kr1.dev.uber.comdevNot in the scope2026-11-14
kr10.dev.uber.comdevNot in the scope2026-11-14
kr11.dev.uber.comdevNot in the scope2026-11-14
krasen.dev.uber.comdevNot in the scope2026-11-14
krasen1.dev.uber.comdevNot in the scope2026-11-14
krdev.dev.uber.comdevNot in the scope2026-11-14
kris.dev.uber.comdevNot in the scope2026-11-14
kris01.dev.uber.comdevNot in the scope2026-11-14
kris02.dev.uber.comdevNot in the scope2026-11-14
kris03.dev.uber.comdevNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated