Sensitive user information disclosure at bonjour.uber.com/marketplace/_rpc via the 'userUuid' parameter Analysed #542340 Valid Information Disclosure High 2019-09-09 – 643 [Pre-Submission][H1-4420-2019] API access to Phabricator on code.uberinternal.com from leaked certificate in git repo Analysed #591813 Valid Information Disclosure Critical 2021-02-25 $40,000 458 Chained Bugs to Leak Victim's Uber's FB Oauth Token Analysed #202781 Valid Authentication High 2019-01-25 – 427 RCE via npm misconfig -- installing internal libraries from the public registry Analysed #1007014 Valid Command and Code Injection Critical 2021-02-24 $9,000 325 Change any Uber user's password through /rt/users/passwordless-signup - Account Takeover (critical) Analysed #143717 Valid Authentication – 2016-07-14 – 312 Unauthorized access to █████████.com allows access to Uber Brazil tax documents and system. Analysed #530441 Valid Access Control Low 2021-03-06 $4,500 210 Authentication bypass on auth.uber.com via subdomain takeover of saostatic.uber.com Analysed #219205 Valid Authentication Critical 2017-07-13 – 183 Open Redirect on central.uber.com allows for account takeover Analysed #206591 Valid Authentication High 2019-01-25 – 144 Reflected XSS on https://www.uber.com Analysed #390386 Valid No weakness recorded High 2021-03-15 – 114 ubernycmarketplace.com is vulnerable to the Heartbleed Bug Analysed #304190 Valid Information Disclosure Low 2020-04-23 $1,500 112 password reset token leaking allowed for ATO of an Uber account Analysed #173551 Valid Authentication Critical 2017-05-17 $10,000 100 SQL Injection on sctrack.email.uber.com.cn Analysed #150156 Valid SQL Injection – 2016-07-25 $4,000 93 Complete Admin account takeover due to PhpDebugBar turned on in Uber's production server Analysed #1883806 Valid Misconfiguration and Insecure Design Medium 2023-08-23 – 90 SAML Authentication Bypass on uchat.uberinternal.com Analysed #223014 Valid Authentication High 2017-09-05 $8,500 88 OneLogin authentication bypass on WordPress sites via XMLRPC Analysed #138869 Valid Command and Code Injection – 2016-07-15 $7,000 83 Pre-auth Remote Code Execution on multiple Uber SSL VPN servers Analysed #540242 Valid Command and Code Injection Critical 2021-02-24 $2,000 80 Subdomain takeover at signup.uber.com Analysed #197489 Valid Access Control High 2019-01-25 – 79 Open AWS S3 bucket at ubergreece.s3.amazonaws.com exposes confidential internal documents and files Analysed #361438 Valid Information Disclosure Low 2021-03-12 $500 70 Subdomain takeover on rider.uber.com due to non-existent distribution on Cloudfront Analysed #175070 Valid Access Control – 2016-12-12 – 69 xss in https://www.uber.com Analysed #145278 Valid Cross-site Scripting – 2016-07-25 – 64 OneLogin authentication bypass on WordPress sites Analysed #136169 Valid Authentication – 2016-06-06 $10,000 58 Blind OOB XXE At "http://ubermovement.com/" Analysed #154096 Valid Command and Code Injection – 2016-08-08 $500 56 Stored XSS on auth.uber.com/oauth/v2/authorize via redirect_uri parameter leads to Account Takeover Analysed #397497 Valid Cross-site Scripting Medium 2021-02-25 $3,000 52