Top10 publishers:

bobrov	70
sp1d3rs	52
bigbear_	38
bl4de	36
isox	36
guido	36
4lemon	34
edio	34
jobert	32
zombiehelp54	31

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Eobot disclosed a bug submitted by psych0tr1a 
Multiple information disclosure

01 Dec 2014
wont-fix

Twitter disclosed a bug submitted by siddiki 
Flaw in valid password policy.

30 Nov 2014
wont-fix

Eobot disclosed a bug submitted by masatokinugawa 
XSS in www.eobot.com(IE9 only)

29 Nov 2014

Twitter disclosed a bug submitted by mohdhaji87 
Broken authentication and invalidated email address leads to account takeover

28 Nov 2014
wont-fix

Twitter disclosed a bug submitted by anshuman_bh 
Creating Unauthorized Audience Lists

28 Nov 2014
wont-fix

IRCCloud disclosed a bug submitted by internetwache 
Weak password policy

27 Nov 2014
wont-fix

Coinbase disclosed a bug submitted by prakharprasad 
Coinbase Android Application - Bitcoin Wallet Leaks OAuth Response Code

26 Nov 2014

99designs disclosed a bug submitted by ashesh 
Source Code Disclosure (PHP)

26 Nov 2014

Ruby on Rails disclosed a bug submitted by nahamsec 
Arbitrary file existence disclosure in Action Pack

20 Nov 2014

Factlink disclosed a bug submitted by nahamsec 
File name/folder enumeration.

18 Nov 2014

IRCCloud disclosed a bug submitted by hari-cybex 
Password type input with auto-complete enabled

17 Nov 2014
wont-fix

IRCCloud disclosed a bug submitted by hari-cybex 
Missing Character Restriction

17 Nov 2014
wont-fix

Twitter disclosed a bug submitted by shahriyar 
Token remains alive ever after logging out!

17 Nov 2014
wont-fix

The Internet disclosed a bug submitted by mik 
rsync hash collisions may allow an attacker to corrupt or modify files

17 Nov 2014

Secret disclosed a bug submitted by vinothkumar 
Broken Authentication and Session Management

17 Nov 2014

Square disclosed a bug submitted by cliffordtrigo 
XSS [BookFresh]

17 Nov 2014

ExpressionEngine disclosed a bug submitted by deadlock 
Stored Cross-Site Scripting Vulnerability in /admin.php?/cp/admin_system/general_configuration

17 Nov 2014

Square disclosed a bug submitted by cliffordtrigo 
XSS in Client Past Activity

17 Nov 2014

Square disclosed a bug submitted by avlidienbrunn 
CRITICAL Account takeover via AngularJS template injection in connect.squareup.com

17 Nov 2014

Twitter disclosed a bug submitted by internetwache 
Full path disclosure at ads.twitter.com

17 Nov 2014

1 ... 253 254 255 256 257 ... 288

BY DENIS WERNER - @NOBBD - IMPRESSUM