---
id: 3631
title: "Top Vulnerability Reports of Third Quarter, 2016"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/top-vulnerability-reports-third-quarter-2016"
published_at: "2016-10-28T08:21:22Z"
tags: ["ai-security", "bug-bounty", "xss", "vulnerability-reports", "twitter", "uber", "quarterly"]
phying_url: "https://phying.com/item/3631"
lang: en
---

# Top Vulnerability Reports of Third Quarter, 2016

## Summary

HackerOne's top five vulnerability reports of Q3 2016: an Uber password-reset account takeover ($10K), SQL injection on an Uber .cn domain, an SVG code-execution report, a subdomain takeover, and an XSS in Twitter's SMS service.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2016-10-28T08:21:22Z
- **Original:** https://www.hackerone.com/blog/top-vulnerability-reports-third-quarter-2016
- **Phying News:** https://phying.com/item/3631