REPORTS
PROGRAMS
PUBLISHERS
Top10 publishers:
b'bobrov'
117
b'sp1d3rs'
86
b'geeknik'
84
b'linkks'
75
b'jobert'
70
b'nyymi'
67
b'someonenobbd'
62
b'ooooooo_q'
54
b'guido'
50
b'haxta4ok00'
49
Now on Twitter
the unofficial
HackerOne
disclosure timeline.
X
b'DigitalSellz'
disclosed a bug submitted by
b'sameoldstory'
b'Access to Amazon S3 bucket'
27 Nov 2016
b'DigitalSellz'
disclosed a bug submitted by
b'robin_linus'
b'Public profile is vulnerable to stored XSS / Facebook Token can be stolen'
27 Nov 2016
b'DigitalSellz'
disclosed a bug submitted by
b'skorov'
b'AWS Signature Disclosure in www.digitalsellz.com allows FULL access to Amazon S3'
27 Nov 2016
b'Ubiquiti Networks'
disclosed a bug submitted by
b'fransrosen'
b'Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entry'
27 Nov 2016
b'Algolia'
disclosed a bug submitted by
b'eboda'
b'Unauthorized team members can leak information and see all API calls through /1/admin/* endpoints, even after they have been removed.'
27 Nov 2016
b'Harvest'
disclosed a bug submitted by
b'eboda'
b'XSS on expenses attachments'
27 Nov 2016
b'Ubiquiti Networks'
disclosed a bug submitted by
b'shubham'
b'Stored XSS in unifi.ubnt.com'
26 Nov 2016
b'Harvest'
disclosed a bug submitted by
b'bugdiscloseguys'
b'Editing a project (LIMITED)'
26 Nov 2016
b'ownCloud'
disclosed a bug submitted by
b'rhinosecuritylabs'
b'SMB User Authentication Bypass and Persistence'
26 Nov 2016
b'Nextcloud'
disclosed a bug submitted by
b'bm_666'
b'xss on demo.nextcloud.com due to outdated version'
26 Nov 2016
b'QIWI'
disclosed a bug submitted by
b'kxyry'
b'[qiwi.com] Oauth ?????? ????????'
26 Nov 2016
b'Snapchat'
disclosed a bug submitted by
b'marwan'
b'Bypassing "You\'ve requested your data the maximum number of times today." + "Please Verify an email address with snapchat to continue" '
25 Nov 2016
b'drchrono'
disclosed a bug submitted by
b'yaworsk'
b'Angular injection in the profile name of onpatient'
25 Nov 2016
b'drchrono'
disclosed a bug submitted by
b'yaworsk'
b'User with no permissions can access full wdcalendar feed'
25 Nov 2016
b'drchrono'
disclosed a bug submitted by
b'yaworsk'
b'User with no permissions can create, edit, delete favorite prescriptions /erx/'
25 Nov 2016
b'Pornhub'
disclosed a bug submitted by
b'mikkz'
b'[IDOR] Deleting other users comment'
24 Nov 2016
b'Ian Dunn'
disclosed a bug submitted by
b'ravenbugbounty'
b'No CAPTCHA ia exist in pages'
23 Nov 2016
b'ownCloud'
disclosed a bug submitted by
b'fbogner'
b'Arbitrary Code Injection in ownCloud\xe2\x80\x99s Windows Client'
23 Nov 2016
b'Pushwoosh'
disclosed a bug submitted by
b'cyriac'
b'Read Application Name , Subscribers Count '
23 Nov 2016
b'Slack'
disclosed a bug submitted by
b'narendrabhati'
b' Stored XSS(Cross Site Scripting) In Slack App Name'
22 Nov 2016
1
...
611
612
613
614
615
...
751
BY DENIS WERNER - @NOBBD -
IMPRESSUM