Bug Bounty Channel

2021-02-26 01:33:31 Hacktivity from mariogomez1

stack trace exposed on https://receipts\.uber\.com/
https://hackerone.com/reports/204568
Disclosed at: 2021-02-25 22:33:22 UTC+0
Created at: 2017-02-08 12:39:39 UTC+0 Open / Comment

2021-02-26 01:31:27 Hacktivity from corb3nik

\[First 30\] Stored XSS on login\.uber\.com/oauth/v2/authorize via redirect\_uri parameter
https://hackerone.com/reports/392106
Disclosed at: 2021-02-25 22:30:57 UTC+0
Created at: 2018-08-09 00:05:11 UTC+0 Open / Comment

2021-02-26 01:29:23 Hacktivity from corb3nik

Stored XSS on auth\.uber\.com/oauth/v2/authorize via redirect\_uri parameter leads to Account Takeover
https://hackerone.com/reports/397497
Disclosed at: 2021-02-25 22:28:30 UTC+0
Created at: 2018-08-21 00:53:28 UTC+0 Open / Comment

2021-02-26 01:23:18 Hacktivity from healdb

Outdated Wordpress installation and plugins at www\.uberxgermany\.com create CSRF and XSS vulnerabilities
https://hackerone.com/reports/323899
Disclosed at: 2021-02-25 22:22:54 UTC+0
Created at: 2018-03-09 15:18:24 UTC+0 Open / Comment

2021-02-26 01:22:16 Hacktivity from tomnomnom

\[Pre\-Submission\]\[H1\-4420\-2019\] API access to Phabricator on code\.uberinternal\.com from leaked certificate in git repo
https://hackerone.com/reports/591813
Disclosed at: 2021-02-25 22:21:17 UTC+0
Created at: 2019-05-28 22:10:23 UTC+0 Open / Comment

2021-02-26 01:19:12 Hacktivity from fawazxq

Disclosure of Co\-Rider user \(Uber\-pooling\) profile picture at Amazon AWS Cloudfront within HTTP RESPONSE
https://hackerone.com/reports/789803
Disclosed at: 2021-02-25 22:18:44 UTC+0
Created at: 2020-02-06 07:47:01 UTC+0 Open / Comment

2021-02-26 01:17:09 Hacktivity from phwd

Listing of email addresses of whitelisted business users visible at business\.uber\.com
https://hackerone.com/reports/125246
Disclosed at: 2021-02-25 22:16:25 UTC+0
Created at: 2016-03-23 05:42:02 UTC+0 Open / Comment

2021-02-26 01:15:05 Hacktivity from rijalrojan

Uber employees are sharing information on productforums\.google\.com
https://hackerone.com/reports/344086
Disclosed at: 2021-02-25 22:14:06 UTC+0
Created at: 2018-04-27 20:51:13 UTC+0 Open / Comment

2021-02-26 01:11:00 Hacktivity from 0xd0m7

\[usuppliers\.uber\.com\] \- Server Side Request Forgery via XXE OOB
https://hackerone.com/reports/448598
Disclosed at: 2021-02-25 22:10:16 UTC+0
Created at: 2018-11-21 21:55:38 UTC+0 Open / Comment

2021-02-26 00:25:32 Hacktivity from orange

Arbitrary File Reading on Uber SSL VPN
https://hackerone.com/reports/617543
Disclosed at: 2021-02-25 21:25:15 UTC+0
Created at: 2019-06-17 18:51:03 UTC+0 Open / Comment