REPORTS
PROGRAMS
PUBLISHERS
Top10 publishers:
b'bobrov'
117
b'sp1d3rs'
86
b'geeknik'
83
b'linkks'
75
b'jobert'
70
b'nyymi'
62
b'someonenobbd'
62
b'ooooooo_q'
54
b'guido'
50
b'haxta4ok00'
49
Now on Twitter
the unofficial
HackerOne
disclosure timeline.
X
b'VK.com'
disclosed a bug submitted by
b'abr1k0s'
b'DOM XSS ? /activation.php?act=activate_mobile'
22 Sep 2016
b'Shopify'
disclosed a bug submitted by
b'zombiehelp54'
b'Open redirect allows changing iframe content in *.myshopify.com/admin/themes/<id>/editor'
22 Sep 2016
b'OpenSSL'
disclosed a bug submitted by
b'nimia'
b"SSLv2 doesn't block disabled ciphers (CVE-2015-3197)"
21 Sep 2016
b'OpenSSL'
disclosed a bug submitted by
b'nimia'
b'Cross-protocol attack on TLS using SSLv2 (DROWN) (CVE-2016-0800)'
21 Sep 2016
b'Instacart'
disclosed a bug submitted by
b'gorkhali'
b'[Critical] Subdomain Takeover'
20 Sep 2016
b'LocalTapiola'
disclosed a bug submitted by
b'nyymi'
b'Remote Code Execution in NovaStor NovaBACKUP DataCenter backup software (Hiback)'
20 Sep 2016
b'HackerOne'
disclosed a bug submitted by
b'geekboy'
b'Hacker.One Subdomain Takeover'
20 Sep 2016
b'Pornhub'
disclosed a bug submitted by
b'cyber-guard'
b'Unsecured Grafana instance'
20 Sep 2016
b'OpenSSL'
disclosed a bug submitted by
b'guido'
b'CVE-2016-2177 Undefined pointer arithmetic in SSL code'
20 Sep 2016
b'Python'
disclosed a bug submitted by
b'johnleitch'
b'msilib.OpenDatabase Type Confusion'
20 Sep 2016
b'Python'
disclosed a bug submitted by
b'nedw'
b'Type confusion in partial.setstate, partial_repr, partial_call leads to memory corruption, reliable control flow hijack'
20 Sep 2016
b'New Relic'
disclosed a bug submitted by
b'pewpew'
b'Login Open Redirect'
19 Sep 2016
b'Instacart'
disclosed a bug submitted by
b'cablej'
b'Brute force login and bypass locked account restrictions via iOS app'
19 Sep 2016
b'Shopify'
disclosed a bug submitted by
b'nismo'
b'XSS in SHOPIFY: Unsanitized Supplier Name can lead to XSS in Transfers Timeline'
19 Sep 2016
b'Shopify'
disclosed a bug submitted by
b'nismo'
b'Unsanitized Location Name in POS Channel can lead to XSS in Orders Timeline'
19 Sep 2016
b'Shopify'
disclosed a bug submitted by
b'ysx'
b'Access to Splunk via shard3-db2.ec2.shopify.com endpoint'
19 Sep 2016
b'OLX'
disclosed a bug submitted by
b'surajsp'
b'full path disclosure vulnerability at https://security.olx.com/*'
19 Sep 2016
b'Boozt Fashion AB'
disclosed a bug submitted by
b'0x00iam_hack3r'
b'Http header injection'
19 Sep 2016
b'Legal Robot'
disclosed a bug submitted by
b'paramdham'
b'No valid SPF record'
19 Sep 2016
b'Legal Robot'
disclosed a bug submitted by
b'paramdham'
b' Rate limiting on Email confirmation link'
19 Sep 2016
1
...
611
612
613
614
615
...
738
BY DENIS WERNER - @NOBBD -
IMPRESSUM