Top10 publishers:

bobrov	76
sp1d3rs	54
bigbear_	38
bl4de	37
guido	37
isox	36
edio	34
4lemon	34
jobert	34
geeknik	33

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

concrete5 disclosed a bug submitted by voodookobra 
Weak random number generator used in concrete/authentication/concrete/controller.php

26 Oct 2014

joola.io disclosed a bug submitted by voodookobra 
Weak Random Number Generator for Auth Tokens

25 Oct 2014

joola.io disclosed a bug submitted by voodookobra 
Timing Attack Side-Channel on API Token Verification

25 Oct 2014

WePay disclosed a bug submitted by anshuman_bh 
Session Fixation

23 Oct 2014

HackerOne disclosed a bug submitted by pranav_hivarekar 
Redirect FILTER bypass in report/comment

19 Oct 2014

Coinbase disclosed a bug submitted by anshuman_bh 
Leaking CSRF token over HTTP resulting in CSRF protection bypass

16 Oct 2014

Mail.Ru disclosed a bug submitted by bigbear 
????????? ??????? ?????????? ????

16 Oct 2014

Twitter disclosed a bug submitted by sehacure 
Cross site scripting on ads.twitter.com

16 Oct 2014

HackerOne disclosed a bug submitted by prakharprasad 
Ability to see common response titles of other teams (limited)

15 Oct 2014

GlassWire disclosed a bug submitted by bigbear 
Clickjacking: X-Frame-Options header missing

12 Oct 2014

Square disclosed a bug submitted by avlidienbrunn 
Reflected XSS in connect.square.com

11 Oct 2014

WePay disclosed a bug submitted by shahmeer_amir 
Session fixation in wepay.com

10 Oct 2014

Greenhouse.io disclosed a bug submitted by simon90 
openssh-server Forced Command Handling Information Disclosure Vulnerability on blog.greenhouse.io

10 Oct 2014

HackerOne disclosed a bug submitted by mrrm 
homograph attack. IDNs displyed in unicode in bug reports and on external link warning page.

09 Oct 2014

IRCCloud disclosed a bug submitted by mohdhaji87 
Bruteforce protection not enabled on the login page https://www.irccloud.com/

08 Oct 2014
wont-fix

Flash disclosed a bug submitted by hhj4ck 
Adobe Flash Player FileReference Use-after-Free Vulnerability

07 Oct 2014

Flash disclosed a bug submitted by kinine 
Flash Local Sandbox Bypass

07 Oct 2014

Twitter disclosed a bug submitted by simon90 
Twitter Flight SSL 2.0 deprecated protocol vulnerability.

07 Oct 2014

Square disclosed a bug submitted by cliffordtrigo 
Open Redirect [FreshBook]

04 Oct 2014

Python disclosed a bug submitted by pakt 
Misc Python bugs (Memory Corruption & Use After Free)

04 Oct 2014

1 ... 274 275 276 277 278 ... 307

BY DENIS WERNER - @NOBBD - IMPRESSUM