Bug Bounty Channel

2021-02-25 19:48:48 Hacktivity from orange

Pre\-auth Remote Code Execution on multiple Uber SSL VPN servers
https://hackerone.com/reports/540242
Disclosed at: 2021-02-24 01:26:56 UTC+0
Created at: 2019-04-16 15:45:28 UTC+0 Open / Comment

2021-02-25 19:48:46 Hacktivity from m4k

Cookie Bombing cause DOS \- businesses\.uber\.com
https://hackerone.com/reports/847493
Disclosed at: 2021-02-24 00:20:01 UTC+0
Created at: 2020-04-11 17:51:11 UTC+0 Open / Comment

2021-02-25 19:48:43 Hacktivity from gamer7112

Reflected XSS on https://www\.uber\.com
https://hackerone.com/reports/708081
Disclosed at: 2021-02-24 00:19:17 UTC+0
Created at: 2019-10-05 06:51:09 UTC+0 Open / Comment

2021-02-25 19:48:41 Hacktivity from molejarka

\[experience\.uber\.com\] Node\.js source code disclosure & anonymous access to internal Uber documents, templates and tools
https://hackerone.com/reports/389078
Disclosed at: 2021-02-23 23:47:59 UTC+0
Created at: 2018-07-31 22:00:37 UTC+0 Open / Comment

2021-02-25 19:48:39 Hacktivity from cablej

\[manage\.jumpbikes\.com\] Blind XSS on Jump admin panel via user name
https://hackerone.com/reports/472470
Disclosed at: 2021-02-23 23:45:51 UTC+0
Created at: 2018-12-27 05:34:17 UTC+0 Open / Comment

2021-02-25 19:48:37 Hacktivity from bugstar

RDR2 game service method allows adding any player to a new Posse without consent
https://hackerone.com/reports/1029594
Disclosed at: 2021-02-23 17:21:43 UTC+0
Created at: 2020-11-08 20:32:57 UTC+0 Open / Comment

2021-02-25 19:48:35 Hacktivity from v6ak

DNS rebinding in \-\-inspect \(insufficient fix of CVE\-2018\-7160\)
https://hackerone.com/reports/1069487
Disclosed at: 2021-02-23 16:35:51 UTC+0
Created at: 2020-12-31 23:31:42 UTC+0 Open / Comment

2021-02-25 19:48:33 Hacktivity from theevilbit

Acronis True Image Local Privilege Escalation via insecure folder permissions
https://hackerone.com/reports/908162
Disclosed at: 2021-02-23 07:20:06 UTC+0
Created at: 2020-06-25 17:21:43 UTC+0 Open / Comment

2021-02-25 19:48:31 Hacktivity from theevilbit

True Image 2021 \- LPE via XPC service communication
https://hackerone.com/reports/966494
Disclosed at: 2021-02-23 07:19:48 UTC+0
Created at: 2020-08-25 07:05:31 UTC+0 Open / Comment

2021-02-23 03:52:13 Hacktivity from imran\_nisar

Stored XSS in Satisfaction Surveys via "Ask Reason for Dissatisfaction" option
https://hackerone.com/reports/953791
Disclosed at: 2021-02-23 00:51:15 UTC+0
Created at: 2020-08-08 05:41:42 UTC+0 Open / Comment