Top10 publishers:

bobrov	114
linkks	73
geeknik	71
sp1d3rs	62
jobert	52
guido	45
bl4de	42
ryat	40
bigbear_	38
zombiehelp54	37

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Maximum disclosed a bug submitted by rhetoric 
'X-Forwarded-Host' key used in input without sanitation - possible cache poisoning

14 Feb 2020

Slack disclosed a bug submitted by akaki 
URL filter bypass in Enterprise Grid

14 Feb 2020

Node.js disclosed a bug submitted by mpracucci 
Fix for CVE-2018-12122 can be bypassed via keep-alive requests

13 Feb 2020

Node.js disclosed a bug submitted by jzebor 
Pull Request #12949 - Security Implications without CVE assignment

13 Feb 2020

Node.js disclosed a bug submitted by jzebor 
Out of order TLS handshake / application data messages lead to segmentation fault

13 Feb 2020

Node.js disclosed a bug submitted by jasnell 
Denial of Service: nghttp2 use of uninitialized pointer

13 Feb 2020

Node.js disclosed a bug submitted by jzebor 
HTTP/2 Denial of Service Vulnerability

13 Feb 2020

Node.js disclosed a bug submitted by htuch 
Vulnerability in http-parser & embedded NULL header handling

13 Feb 2020

NordVPN disclosed a bug submitted by d4nt 
Clickjacking at join.nordvpn.com

13 Feb 2020

Polymail, Inc. disclosed a bug submitted by xaleraf4ra 
[share.polymail.io] XSS when uploading a file to the server

13 Feb 2020

Data Processing (IBB) disclosed a bug submitted by bugbasher 
Tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option() (CVE-2018-16229)

13 Feb 2020

Data Processing (IBB) disclosed a bug submitted by bugbasher 
Tcpdump before 4.9.3 has a buffer over-read in print-802_11.c (CVE-2018-16227)

13 Feb 2020

Data Processing (IBB) disclosed a bug submitted by geeknik 
tcpdump: CVE-2018-14879 - buffer overflow in tcpdump.c:get_next_file()

13 Feb 2020

MobiSystems Ltd. disclosed a bug submitted by emmano 
Firebase Firestore insecure database

13 Feb 2020

Visma Bug Bounty Program disclosed a bug submitted by anglecutter 
Stored XSS in 'Notes'

13 Feb 2020

Ruby disclosed a bug submitted by d3athstrok3 
Source code disclosed via S3 Bucket

13 Feb 2020

8x8 disclosed a bug submitted by l34r00t 
Sensitive information disclosure

12 Feb 2020

8x8 disclosed a bug submitted by konqi 
(Critical) Remote Code Execution Through Old TinyMCE upload bypass

12 Feb 2020

8x8 disclosed a bug submitted by 0x496 
Reflected xss on 8x8.com subdomain

12 Feb 2020

Endless Hosting disclosed a bug submitted by codermak 
Modify Host Header which is sent to email

12 Feb 2020

1 2 3 4 ... 406

BY DENIS WERNER - @NOBBD - IMPRESSUM