Top10 publishers:

bobrov	76
sp1d3rs	54
bigbear_	38
bl4de	37
guido	37
isox	36
edio	34
4lemon	34
jobert	34
geeknik	33

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

concrete5 disclosed a bug submitted by ishahriyar 
Stored XSS in Bio/Quote

08 Jul 2015

concrete5 disclosed a bug submitted by ishahriyar 
Stored XSS in Message to Display When No Pages Listed.

08 Jul 2015

concrete5 disclosed a bug submitted by ishahriyar 
Stored XSS in Image Alt. Text

08 Jul 2015

Udemy disclosed a bug submitted by adrianbelen 
xss on autoserch

08 Jul 2015

OkCupid disclosed a bug submitted by artem 
Stored XSS in popup messages window

06 Jul 2015

HackerOne disclosed a bug submitted by danlec 
In markdown, parsing things like @danlec and #46072 after links is unsafe

04 Jul 2015

Shopify disclosed a bug submitted by sukhoi 
Shopify android client all API request's response leakage, including access_token, cookie, response header, response body content

04 Jul 2015

Airbnb disclosed a bug submitted by faisalahmed 
I Can Delete Any Airbnb Users Symbol!

03 Jul 2015

Shopify disclosed a bug submitted by pranav_hivarekar 
Open redirection in OAuth

03 Jul 2015

Python disclosed a bug submitted by tukan 
use after free in load_newobj_ex

02 Jul 2015

Shopify disclosed a bug submitted by wesecureapp 
[persistent cross-site scripting] customers can target admins

01 Jul 2015

HackerOne disclosed a bug submitted by danlec 
Markdown code block sequence makes report unreadable

29 Jun 2015

Python disclosed a bug submitted by johnleitch 
bytearray.find Buffer Over-read

29 Jun 2015

Mail.Ru disclosed a bug submitted by bigbear 
???????????? ????????? ?? ???? ?????????? ? IIS

28 Jun 2015

Mail.Ru disclosed a bug submitted by niyaax 
No bruteforce protection leads to enumeration of emails in http://e.mail.ru/

28 Jun 2015

Vimeo disclosed a bug submitted by securityidiots 
Open Redirection Security Filter bypassed

28 Jun 2015

Vimeo disclosed a bug submitted by securityidiots 
Application XSS filter function Bypass may allow Multiple stored XSS

28 Jun 2015

Mail.Ru disclosed a bug submitted by reactors08 
e.mail.ru stored XSS in agent via sticker (smile)

28 Jun 2015

Python disclosed a bug submitted by johnleitch 
audioop.adpcm2lin Buffer Over-read

28 Jun 2015

GhostMail disclosed a bug submitted by behroz 
Design Issue

27 Jun 2015

1 ... 253 254 255 256 257 ... 307

BY DENIS WERNER - @NOBBD - IMPRESSUM