Bug bounty program

Uber

Platform: HackerOne
Bounties: Pays
Assets in scope: 4
Disclosed reports: 239
Subdomains: 11,395
Vendor on CyberSIXT: Uber (4 CVEs, 0 exploited)

Most upvoted reports239

Most upvoted reports of Uber
Report	Weakness	Disclosed	Bounty	Votes
Sensitive user information disclosure at bonjour.uber.com/marketplace/_rpc via the 'userUuid' parameterAnalysed#542340	Information Disclosure	2019-09-09	–	643
[Pre-Submission][H1-4420-2019] API access to Phabricator on code.uberinternal.com from leaked certificate in git repoAnalysed#591813	Information Disclosure	2021-02-25	$40,000	458
Chained Bugs to Leak Victim's Uber's FB Oauth TokenAnalysed#202781	Authentication	2019-01-25	–	427
Reflected XSS and sensitive data exposure, including payment details, on lioncityrentals.com.sgAnalysed#340431	Cryptography	2020-04-30	$4,000	376
RCE via npm misconfig -- installing internal libraries from the public registryAnalysed#1007014	Command and Code Injection	2021-02-24	$9,000	325
Change any Uber user's password through /rt/users/passwordless-signup - Account Takeover (critical)Analysed#143717	Authentication	2016-07-14	–	312
XSS At "pages.et.uber.com"#156098	Cross-site Scripting	2016-08-19	–	267
Stored XSS in developer.uber.comAnalysed#131450	Cross-site Scripting	2016-06-27	$7,500	223
Unauthorized access to █████████.com allows access to Uber Brazil tax documents and system.Analysed#530441	Access Control	2021-03-06	$4,500	210
Authentication bypass on auth.uber.com via subdomain takeover of saostatic.uber.comAnalysed#219205	Authentication	2017-07-13	–	183

Subdomains11,395

Root

uber.com11,395

Scope

Name suggests

First seen

Text file11,395 names

Subdomains of Uber
Name	Scope	First seen
embarrass.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
emed.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
enauocztx.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
endorphin.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
engine4.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
enric.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
enseeiht.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
ensi.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
entitlements.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
eomer.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
epage.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
epdp.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
eracun.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
erikson.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
eshiboxianshangyouhuihuodong.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
eshiboyulechengzhenqianyouxi.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
esra.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
ess3.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
etcm.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
eternalblue1.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
europe-presto.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
ewinyulechengtuijianren.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
exseed.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
ext46.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
extrasexyx.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
f44e.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
facebookmultilingual-com.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
fahsai2.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
fairyparadise-com.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
fanglangpenwupifa.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
fangs.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
fazhongfayulechengdubo.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
fcwr.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
feicaiyulechengxinyuzenyang.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
felipe.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
fenbaihecaibacangjitu.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
fenggang.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
fengheqipaibokelai.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
fengkuangniuniu.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
fileserver1.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
fileshare1.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
filetransfers.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
firix.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
firstju1.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
flashyhannah.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
flatout.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
flseok.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
fpsu.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
fr31.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
francine.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
fucaiguanfangwangzhan.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
fujiancaipiao36zoushitu.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
fulilaishishicai.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
gaar.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
gaia2.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
gallia.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
ganbibi.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
ganzhouxiaojie.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
gaspra.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
gate210.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
gate252.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
gateway50.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
gatorboxsud.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
gcf.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
gdxh.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
geog4.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
george2.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
gexingwangdatusucaitieba.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
gezond.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
gjjy.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
glad.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
go2av.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
goorlando.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
goremote.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
goulyeon.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
govols.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
goyle.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
granger.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
greiz.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
ground2.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
gs0.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
gtfh.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
guangshuixiaojie.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
guanjiapozhuatema.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
guapaiziliao.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
guias.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
guilinshibocaigongsi.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
guizhoudianshitaizhibo.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
gullstrand.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
guojiyulechengbocaiwangzhan.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
guomiyulekaihusongtiyanjin.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
guozubisaimenpiaozenmemai.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
gupiaowangshangkaihuanquanma.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
gustave.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
gvcyoh.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
h4rs.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
hakmaeul.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
handancaipiaowang.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
handerson.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14
hanguombc.mx.dev.uber.comdev, mail	Not in the scope	2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.