Top10 publishers:

bobrov	60
isox	36
4lemon	34
zombiehelp54	30
ston3	27
smiegles	27
shahmeer_amir	26
jobert	26
haquaman	26
guido	26

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

IRCCloud disclosed a bug submitted by xss 
Login page password-guessing attack(Brute-force attack-High).

26 Apr 2014
wont-fix

HackerOne disclosed a bug submitted by leander 
Arbitrary file uploads to Amazon WS.

26 Apr 2014
wont-fix

IRCCloud disclosed a bug submitted by anshuman_bh 
Host Header is not validated resulting in Open Redirect

24 Apr 2014

Ian Dunn disclosed a bug submitted by atulshedage 
Xss in CampTix Event Ticketing

24 Apr 2014

ReddAPI disclosed a bug submitted by exploitprotocol 
No Captcha or rate limit on Login Page

23 Apr 2014

IRCCloud disclosed a bug submitted by exploitprotocol 
Session Token is not Verified while changing Account Setting's which Result In account Takeover

23 Apr 2014

respondly disclosed a bug submitted by atom 
Deleting team members

23 Apr 2014

Localize disclosed a bug submitted by simon90 
Criptographic Issue: Strisct Transport Security with not good max age..(TOO SHORT!)

23 Apr 2014

Localize disclosed a bug submitted by faisalahmed 
Atttacker can send "Invitation Request" to a Project that is not even created yet!

23 Apr 2014

respondly disclosed a bug submitted by mohamed_fouad 
Full Path Disclosure

23 Apr 2014

Localize disclosed a bug submitted by faisalahmed 
Full Path Disclosure (FPD) in www.localize.im

23 Apr 2014

Ian Dunn disclosed a bug submitted by cliffordtrigo 
Stored XSS in all fields in Basic Google Maps Placemarks Settings

23 Apr 2014

Secret disclosed a bug submitted by simon90 
Strict Transport Security on secret.ly

22 Apr 2014

OkCupid disclosed a bug submitted by simon90 
Stored XSS on your site..

22 Apr 2014

HackerOne disclosed a bug submitted by simon90 
Criptographic Issue: Strisct Transport Security with not good max age..(TOO SHORT!)

22 Apr 2014

Localize disclosed a bug submitted by robin 
No BruteForce Protection

22 Apr 2014

respondly disclosed a bug submitted by melvin 
OAuth open redirect

22 Apr 2014

Localize disclosed a bug submitted by faisalahmed 
A Serious Bug on SIGNUP Process!

22 Apr 2014

Localize disclosed a bug submitted by faisalahmed 
infinite number of new project creation!

22 Apr 2014

IRCCloud disclosed a bug submitted by cliffordtrigo 
Login CSRF

21 Apr 2014

1 ... 196 197 198 199 200 ... 208

BY DENIS WERNER - @NOBBD - IMPRESSUM