Skip to content
Connect AISign inSign up free

Bug bounty program

UB

Uber

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
4
Disclosed reports
239
Subdomains
11,395
Vendor on CyberSIXT
Uber (4 CVEs, 0 exploited)

Most upvoted reports239

All reports
Most upvoted reports of Uber
ReportWeaknessDisclosedBountyVotes
Sensitive user information disclosure at bonjour.uber.com/marketplace/_rpc via the 'userUuid' parameterAnalysed#542340Information Disclosure2019-09-09–643
[Pre-Submission][H1-4420-2019] API access to Phabricator on code.uberinternal.com from leaked certificate in git repoAnalysed#591813Information Disclosure2021-02-25$40,000458
Chained Bugs to Leak Victim's Uber's FB Oauth TokenAnalysed#202781Authentication2019-01-25–427
Reflected XSS and sensitive data exposure, including payment details, on lioncityrentals.com.sgAnalysed#340431Cryptography2020-04-30$4,000376
RCE via npm misconfig -- installing internal libraries from the public registryAnalysed#1007014Command and Code Injection2021-02-24$9,000325
Change any Uber user's password through /rt/users/passwordless-signup - Account Takeover (critical)Analysed#143717Authentication2016-07-14–312
XSS At "pages.et.uber.com"#156098Cross-site Scripting2016-08-19–267
Stored XSS in developer.uber.comAnalysed#131450Cross-site Scripting2016-06-27$7,500223
Unauthorized access to █████████.com allows access to Uber Brazil tax documents and system.Analysed#530441Access Control2021-03-06$4,500210
Authentication bypass on auth.uber.com via subdomain takeover of saostatic.uber.comAnalysed#219205Authentication2017-07-13–183

Subdomains11,395

Root
Scope
Name suggests
First seen
Text file11,395 names
Subdomains of Uber
NameScopeFirst seen
login.nike.dev.uber.comauth, devNot in the scope2026-11-14
nikethan.dev.uber.comdevNot in the scope2026-11-14
nikethan2.dev.uber.comdevNot in the scope2026-11-14
nikhil.dev.uber.comdevNot in the scope2026-11-14
nikhil-c.dev.uber.comdevNot in the scope2026-11-14
nikhilk3.dev.uber.comdevNot in the scope2026-11-14
nikhilk4.dev.uber.comdevNot in the scope2026-11-14
nikihub.dev.uber.comdevNot in the scope2026-11-14
niko.dev.uber.comdevNot in the scope2026-11-14
nikogalkovone.dev.uber.comdevNot in the scope2026-11-14
nikolay.dev.uber.comdevNot in the scope2026-11-14
nikolay-dev.dev.uber.comdevNot in the scope2026-11-14
nikolay-eu.dev.uber.comdevNot in the scope2026-11-14
nikolay0.dev.uber.comdevNot in the scope2026-11-14
nikolay2.dev.uber.comdevNot in the scope2026-11-14
nikolayh.dev.uber.comdevNot in the scope2026-11-14
nikunj.dev.uber.comdevNot in the scope2026-11-14
nikunj-dev.dev.uber.comdevNot in the scope2026-11-14
nikunj-developer2.dev.uber.comdevNot in the scope2026-11-14
nikunj-riak-dev.dev.uber.comdevNot in the scope2026-11-14
nikunj-riak-developer.dev.uber.comdevNot in the scope2026-11-14
nikunjy.dev.uber.comdevNot in the scope2026-11-14
nilesh.dev.uber.comdevNot in the scope2026-11-14
nilmish.dev.uber.comdevNot in the scope2026-11-14
nilmish0.dev.uber.comdevNot in the scope2026-11-14
nilmish1.dev.uber.comdevNot in the scope2026-11-14
nilmish2.dev.uber.comdevNot in the scope2026-11-14
nilmishp2.dev.uber.comdevNot in the scope2026-11-14
nimish.dev.uber.comdevNot in the scope2026-11-14
nimish1.dev.uber.comdevNot in the scope2026-11-14
nimish2.dev.uber.comdevNot in the scope2026-11-14
nimishm.dev.uber.comdevNot in the scope2026-11-14
nina.dev.uber.comdevNot in the scope2026-11-14
nina-mbm.dev.uber.comdevNot in the scope2026-11-14
ninjaa.dev.uber.comdevNot in the scope2026-11-14
nir0.dev.uber.comdevNot in the scope2026-11-14
nir3.dev.uber.comdevNot in the scope2026-11-14
nissan-accord-2.dev.uber.comdevNot in the scope2026-11-14
nissan-alcyone-svx-1.dev.uber.comdevNot in the scope2026-11-14
nissan-allante-5.dev.uber.comdevNot in the scope2026-11-14
nissan-apv-8.dev.uber.comdevNot in the scope2026-11-14
nissan-avanti-5.dev.uber.comdevNot in the scope2026-11-14
nissan-aviator-5.dev.uber.comdevNot in the scope2026-11-14
nissan-azera-4.dev.uber.comdevNot in the scope2026-11-14
nissan-batmobile-7.dev.uber.comdevNot in the scope2026-11-14
nissan-caprice-1.dev.uber.comdevNot in the scope2026-11-14
nissan-caprice-classic-7.dev.uber.comdev, legacyNot in the scope2026-11-14
nissan-chariot-6.dev.uber.comdevNot in the scope2026-11-14
nissan-ciera-6.dev.uber.comdevNot in the scope2026-11-14
nissan-concorde-9.dev.uber.comdevNot in the scope2026-11-14
nissan-corsica-3.dev.uber.comdevNot in the scope2026-11-14
nissan-countryman-116.dev.uber.comdevNot in the scope2026-11-14
nissan-crown-4.dev.uber.comdevNot in the scope2026-11-14
nissan-fivehundred-5.dev.uber.comdevNot in the scope2026-11-14
nissan-fury-1.dev.uber.comdevNot in the scope2026-11-14
nissan-gallardo-1.dev.uber.comdevNot in the scope2026-11-14
nissan-imperial-9.dev.uber.comdevNot in the scope2026-11-14
nissan-maxx-9.dev.uber.comdevNot in the scope2026-11-14
nissan-miata-6.dev.uber.comdevNot in the scope2026-11-14
nissan-mpv-4.dev.uber.comdevNot in the scope2026-11-14
nissan-panamera-2.dev.uber.comdevNot in the scope2026-11-14
nissan-panamera-3.dev.uber.comdevNot in the scope2026-11-14
nissan-pilot-7.dev.uber.comdevNot in the scope2026-11-14
nissan-probe-9.dev.uber.comdevNot in the scope2026-11-14
nissan-prowler-4.dev.uber.comdevNot in the scope2026-11-14
nissan-quattro-7.dev.uber.comdevNot in the scope2026-11-14
nissan-rangerover-4.dev.uber.comdevNot in the scope2026-11-14
nissan-routan-9.dev.uber.comdevNot in the scope2026-11-14
nissan-runner-9.dev.uber.comdevNot in the scope2026-11-14
nissan-sonata-5.dev.uber.comdevNot in the scope2026-11-14
nissan-stanza-8.dev.uber.comdevNot in the scope2026-11-14
nissan-stylus-2.dev.uber.comdevNot in the scope2026-11-14
nissan-sunfire-7.dev.uber.comdevNot in the scope2026-11-14
nissan-thunderbird-2.dev.uber.comdevNot in the scope2026-11-14
nissan-tundra-1.dev.uber.comdevNot in the scope2026-11-14
nissan-x6-m-4.dev.uber.comdevNot in the scope2026-11-14
nissan-xg-8.dev.uber.comdevNot in the scope2026-11-14
nissan-yukon-7.dev.uber.comdevNot in the scope2026-11-14
nitinb.dev.uber.comdevNot in the scope2026-11-14
nitinj.dev.uber.comdevNot in the scope2026-11-14
nitinj2.dev.uber.comdevNot in the scope2026-11-14
noaml1.dev.uber.comdevNot in the scope2026-11-14
nomad.dev.uber.comdevNot in the scope2026-11-14
noon.dev.uber.comdevNot in the scope2026-11-14
noparties.dev.uber.comdevNot in the scope2026-11-14
norbert.dev.uber.comdevNot in the scope2026-11-14
norman.dev.uber.comdevNot in the scope2026-11-14
not-china.dev.uber.comdevNot in the scope2026-11-14
notifier.dev.uber.comdevNot in the scope2026-11-14
ntorres.dev.uber.comdevNot in the scope2026-11-14
nuber-account-provisioner.dev.uber.comdevNot in the scope2026-11-14
nx.dev.uber.comdevNot in the scope2026-11-14
nx0.dev.uber.comdevNot in the scope2026-11-14
o.dev.uber.comdevNot in the scope2026-11-14
o2.dev.uber.comdevNot in the scope2026-11-14
o3.dev.uber.comdevNot in the scope2026-11-14
o5.dev.uber.comdevNot in the scope2026-11-14
oakland1.dev.uber.comdevNot in the scope2026-11-14
oauth.dev.uber.comauth, devNot in the scope2026-11-14
oauth2-wei.dev.uber.comauth, devNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated