Lucene search
+L

2 matches found

Hacker One
Hacker One
added 2018/02/18 5:15 p.m.10 views

Uber: Delay of arrears notification allows Riders to take multiple rides without paying

Due to a delay in how Uber prompts accounts that have gone into arrears having an outstanding balance, it was possible to take rides without paying and without the account being blocked from booking new rides. This delay was a short-term issue, not a security vulnerability, and @djangohack’s...

3AI score
SaveExploits0
Hacker One
Hacker One
added 2017/03/27 9:50 a.m.17 views

Uber: deleting payment profile during active trip puts account into arrears but active trip is temporarily “free”

Deleting a payment profile for an account that is actively taking a trip results in the trip not being charged, but moves the user's account into arrears and when a payment profile is added back, the account is charged the unpaid amount...

3.6AI score
SaveExploits0
Rows per page
Query Builder