REPORTS
PROGRAMS
PUBLISHERS
Top10 publishers:
b'bobrov'
117
b'sp1d3rs'
86
b'geeknik'
80
b'linkks'
75
b'jobert'
70
b'someonenobbd'
62
b'nyymi'
58
b'ooooooo_q'
52
b'haxta4ok00'
49
b'jon_bottarini'
49
Now on Twitter
the unofficial
HackerOne
disclosure timeline.
X
b'Slack'
disclosed a bug submitted by
b'niks'
b'Reflected Xss'
19 May 2014
b'C2FO'
disclosed a bug submitted by
b'internetwache'
b'User guessing/enumeration at https://app.c2fo.com/api/password-reset'
19 May 2014
b'Localize'
disclosed a bug submitted by
b'vhssunny1'
b'Server header - information disclosure '
19 May 2014
b'Localize'
disclosed a bug submitted by
b'karthic'
b'X-Content-Type-Options header missing'
19 May 2014
b'joola.io'
disclosed a bug submitted by
b'shahmeer_amir'
b'Login password guessing attack'
19 May 2014
b'Localize'
disclosed a bug submitted by
b'guido'
b'Change user settings through CSRF'
18 May 2014
b'Localize'
disclosed a bug submitted by
b'abhijeth'
b'Password Policy'
18 May 2014
b'Localize'
disclosed a bug submitted by
b'vhssunny1'
b'Business logic Failure - Browser cache management and logout vulnerability.'
18 May 2014
b'Localize'
disclosed a bug submitted by
b'melvin'
b'Apache2 /icons/ folder accessible'
18 May 2014
b'respondly'
disclosed a bug submitted by
b'vandana91'
b'x-frame options-sameorigin warning'
18 May 2014
b'respondly'
disclosed a bug submitted by
b'daksh'
b'DNS Misconfiguration'
18 May 2014
b'IRCCloud'
disclosed a bug submitted by
b'ashesh'
b'Unwanted Spamming Using CSRF [LOGGED IN USER]'
17 May 2014
wont-fix
b'Automattic'
disclosed a bug submitted by
b'melvin'
b'Simplenote Silverlight cross-domain policy misconfiguration'
17 May 2014
b'Localize'
disclosed a bug submitted by
b'daksh'
b'ClickJacking'
17 May 2014
b'Yahoo!'
disclosed a bug submitted by
b'redshark1802'
b'Local File Include on marketing-dam.yahoo.com'
16 May 2014
b'C2FO'
disclosed a bug submitted by
b'melvin'
b'The server supports only older protocols for HTTPS connections'
15 May 2014
b'IRCCloud'
disclosed a bug submitted by
b'cliffordtrigo'
b'Unsecure cookies, cookie flag secure not set'
15 May 2014
b'IRCCloud'
disclosed a bug submitted by
b'melvin'
b'Session cookie can be leaked over an unencrypted HTTP connection'
15 May 2014
b'IRCCloud'
disclosed a bug submitted by
b'shipcode'
b'Missing X-Content-Type-Options'
15 May 2014
b'IRCCloud'
disclosed a bug submitted by
b'nikbugbounty'
b'Bug in iOS application which could lead to unauthorised access.'
15 May 2014
1
...
710
711
712
713
714
...
724
BY DENIS WERNER - @NOBBD -
IMPRESSUM