Top10 publishers:

bobrov	114
geeknik	70
linkks	69
sp1d3rs	61
jobert	50
guido	45
bl4de	41
ryat	40
bigbear_	38
zombiehelp54	37

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Uber disclosed a bug submitted by cyber__sec 
Self-XSS on partners.uber.com

26 Jul 2016

Uber disclosed a bug submitted by josephjose96 
XSS via password recovering

26 Jul 2016

Uber disclosed a bug submitted by punkit 
Defect-Security | Driver-Broken Authentication | Able to update the Subscription Setting anonymously

26 Jul 2016

Uber disclosed a bug submitted by bugs3ra 
User credentials are not strong on vault.uber.com

26 Jul 2016

Uber disclosed a bug submitted by zombiehelp54 
XSS in uber oauth

26 Jul 2016

Uber disclosed a bug submitted by severus 
Can add employee in business.uber.com without add payment method

26 Jul 2016

Uber disclosed a bug submitted by vivek_patil 
Text Only Content Spoofing on ubermovement.com Community Page

26 Jul 2016

Uber disclosed a bug submitted by siddiki 
Requested and received edit access to Google form

26 Jul 2016

Uber disclosed a bug submitted by rojanr 
Subdomain takeover of translate.uber.com, de.uber.com and fr.uber.com

25 Jul 2016

Uber disclosed a bug submitted by anish2good 
Uber is Flooding my Mobile with SMS Daily like a cron JOB

25 Jul 2016

Uber disclosed a bug submitted by netfuzzer 
xss in https://www.uber.com

25 Jul 2016

Uber disclosed a bug submitted by orange 
SQL Injection on sctrack.email.uber.com.cn

25 Jul 2016

OLX disclosed a bug submitted by hacklikeapro 
xss yaman.olx.ph

25 Jul 2016

Ian Dunn disclosed a bug submitted by ahsantahirat 
CSRF in changing settings of Basic Google Maps Placemarks

25 Jul 2016

Urban Dictionary disclosed a bug submitted by rchase 
Infinite Upvoting/Downvoting: Lockout Bypass, Plus: Exposed API Documentation

24 Jul 2016

Gratipay disclosed a bug submitted by roshanpty 
User Supplied links on profile page is not validated and redirected via gratipay.

24 Jul 2016

Binary.com disclosed a bug submitted by roshanpty 
HTML injection via 'underlying' parameter

24 Jul 2016

Coinbase disclosed a bug submitted by roshanpty 
The 'Create a New Account' action is vulnerable to CSRF

24 Jul 2016

Coinbase disclosed a bug submitted by roshanpty 
An adversary can overwhelm the resources by automating Forgot password/Sign Up requests

24 Jul 2016

GlassWire disclosed a bug submitted by xiaoyinl 
Bypass GlassWire's monitoring of Hosts file

23 Jul 2016

1 ... 273 274 275 276 277 ... 385

BY DENIS WERNER - @NOBBD - IMPRESSUM