Top10 publishers:

bobrov	114
linkks	73
geeknik	70
sp1d3rs	62
jobert	52
guido	45
bl4de	42
ryat	40
bigbear_	38
zombiehelp54	37

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

NordVPN disclosed a bug submitted by nickelheck 
Open redirect

18 Jan 2020

Bumble disclosed a bug submitted by 0x3c3e 
Bruteforce password recovery code

18 Jan 2020

Vanilla disclosed a bug submitted by h1_squirtle 
Abusing "Report as abuse" functionality to delete any user's post.

18 Jan 2020

Yelp disclosed a bug submitted by md15ev 
DoS of https://blog.yelp.com/ and other WP instances via CVE-2018-6389

17 Jan 2020

Smule disclosed a bug submitted by so_h1 
Open redirect bypass & SSRF Security Vulnerability

17 Jan 2020

DRIVE.NET, Inc. disclosed a bug submitted by konqi 
???????? XSS ? Business-????????, ?? ???????? ????????

17 Jan 2020

Razer disclosed a bug submitted by sambal0x 
[Razer Pay Mobile App] Broken access control allowing other user's bank account to be deleted

16 Jan 2020

Razer disclosed a bug submitted by st00rm 
Through blocking the redirect in /* the attacker able to bypass Authentication To see Sensitive Data sush as Game Keys , Emails ,..

16 Jan 2020

NordVPN disclosed a bug submitted by shardulb_23 
Disclosure of User Information

16 Jan 2020

MariaDB disclosed a bug submitted by md15ev 
Exposed debug.log file leads to information disclosure

15 Jan 2020

Node.js disclosed a bug submitted by verdaster 
Http response is not ended although underlying socket is already destroyed

15 Jan 2020

Valve disclosed a bug submitted by b0yd 
Arbitrary File Write as SYSTEM from unprivileged user

15 Jan 2020

8x8 disclosed a bug submitted by 0x496 
Reflected xss on 8x8.vc

15 Jan 2020

DataStax disclosed a bug submitted by priyanshuxo 
Helpdesk Takeover at dmc.datastax.com

15 Jan 2020

Maker Ecosystem Growth Holding disclosed a bug submitted by ardi4x 
Wordpress users disclosure on blog.makerdao.con

15 Jan 2020

Maker Ecosystem Growth Holding disclosed a bug submitted by 0xbugger 
UNRESTRICTED FILE UPLOAD AT chat.makerdao.com

15 Jan 2020

Maker Ecosystem Growth Holding disclosed a bug submitted by offensive-security 
Two-factor authentication (2FA) Bypass

15 Jan 2020

Maker Ecosystem Growth Holding disclosed a bug submitted by m7mdharoun 
App Takeover ( makerdao.herokuapp.com )

15 Jan 2020

Node.js disclosed a bug submitted by bayotop 
url.parse() hostname spoofing via javascript: URIs

15 Jan 2020

1 2 3 ... 397

BY DENIS WERNER - @NOBBD - IMPRESSUM