Top10 publishers:

bobrov	117
geeknik	78
linkks	75
sp1d3rs	66
jobert	61
jon_bottarini	49
netfuzzer	48
ryat	47
guido	45
bl4de	42

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

U.S. Dept Of Defense disclosed a bug submitted by skarsom 
on https:// enable scraping, injection, stored XSS

11 May 2021

U.S. Dept Of Defense disclosed a bug submitted by geeknik 
XSS via X-Forwarded-Host header

11 May 2021

U.S. Dept Of Defense disclosed a bug submitted by moon_shadow 
https:// is vulnerable to cve-2020-3452

11 May 2021

U.S. Dept Of Defense disclosed a bug submitted by khun_myat 
Path Traversal - [ CVE-2020-3452 ]

11 May 2021

U.S. Dept Of Defense disclosed a bug submitted by nagli 
DOM Based XSS on https:// via backURL param

11 May 2021

U.S. Dept Of Defense disclosed a bug submitted by r00tpgp 
Members Personal Information Leak Due to IDOR

11 May 2021

Sifchain disclosed a bug submitted by ibrahimauwal1 
Email Spoofing on sifchain.finance

11 May 2021

Nextcloud disclosed a bug submitted by rtod 
Default Nextcloud allows http federated shares

11 May 2021

Sifchain disclosed a bug submitted by lemon_in-the_spoon 
Clickjacking Vulnerability in sifchain.finance

11 May 2021

Valve disclosed a bug submitted by gamer7112 
[Portal 2] Remote Code Execution via voice packets

10 May 2021

MCUboot disclosed a bug submitted by dk82hg 
DMARC and DNS Records not found on mcuboot.com

10 May 2021

Algolia disclosed a bug submitted by iamthefrogy 
PHP-FPM status page disclosure

10 May 2021

New Relic disclosed a bug submitted by moon_shadow 
removed user can still join the organization

10 May 2021

Kartpay disclosed a bug submitted by streetdragon 
Host Header Injection

10 May 2021

Kubernetes disclosed a bug submitted by ronald_petty 
SHA512 incorrect on most/many releases

09 May 2021

Slack disclosed a bug submitted by oskarsv 
Team members can trigger arbitrary code execution in Slack Desktop Apps via HTML Notifications

09 May 2021

On disclosed a bug submitted by sahil__soni 
Graphql introspection is enabled and leaks details about the schema

09 May 2021

Sifchain disclosed a bug submitted by mhohlfeld 
Found key_adress and key_password in GitHub history

08 May 2021

Sifchain disclosed a bug submitted by buggrammers 
Information disclosure on Sifchain

08 May 2021

1 2 3 ... 539

BY DENIS WERNER - @NOBBD - IMPRESSUM