Top10 publishers:

bobrov	60
isox	36
4lemon	34
zombiehelp54	30
smiegles	27
ston3	27
guido	26
jobert	26
shahmeer_amir	26
ishahriyar	25

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Mavenlink disclosed a bug submitted by mikkz 
Login CSRF

31 Jul 2014

Uzbey LLC disclosed a bug submitted by faisalahmed 
All Active user sessions should be destroyed when user change his password!

30 Jul 2014

DC Compendium disclosed a bug submitted by smiegles 
Error page Cross-site scripting

30 Jul 2014

jsDelivr disclosed a bug submitted by shubham 
XSS

29 Jul 2014

jsDelivr disclosed a bug submitted by shahmeer_amir 
HSTS Policy not enabled on cdn.jsdelivr.net

29 Jul 2014
wont-fix

4chan disclosed a bug submitted by reactors08 
XSS in settings

28 Jul 2014

Slack disclosed a bug submitted by sehacure 
CSRF vulnerability on https://sehacure.slack.com/account/settings

26 Jul 2014

Coinbase disclosed a bug submitted by anshuman_bh 
CSRF on "Set as primary" option on the accounts page

26 Jul 2014

RelateIQ disclosed a bug submitted by pum 
SSRF (Portscan) via Register Function (Custom Server)

26 Jul 2014

HackerOne disclosed a bug submitted by sehacure 
Category- Broken Authentication and Session Management (leads to account compromise if some conditions are met)

26 Jul 2014

RelateIQ disclosed a bug submitted by cliffordtrigo 
TRACE disclosure attack may be possible

25 Jul 2014

WePay disclosed a bug submitted by cliffordtrigo 
CSRF & Nonce Token Weak Implementation

25 Jul 2014

The Internet disclosed a bug submitted by donb 
LZ4 Core

25 Jul 2014

Mavenlink disclosed a bug submitted by panchocosil 
Flash XSS on swfupload.swf showing at app.mavenlink.com

24 Jul 2014

Uzbey LLC disclosed a bug submitted by karthic 
Language version disclosure in response header

23 Jul 2014

Uzbey LLC disclosed a bug submitted by anonymous_india 
Breach Attack Vulnerability

23 Jul 2014
wont-fix

Uzbey LLC disclosed a bug submitted by anonymous_india 
HTML Form Without CSRF Protection Vulnerability

23 Jul 2014
wont-fix

Uzbey LLC disclosed a bug submitted by prakharprasad 
Flash Content-Type Sniffing Vulnerability

23 Jul 2014

Uzbey LLC disclosed a bug submitted by jimeno 
IFXSS (image filename XSS) by creating a new Photo Gallery

23 Jul 2014

Phabricator disclosed a bug submitted by xtross 
Back - Refresh - Attack To Obtain User Credentials

23 Jul 2014
wont-fix

1 ... 175 176 177 178 179 ... 198

BY DENIS WERNER - @NOBBD - IMPRESSUM