Top10 publishers:

bobrov	114
linkks	73
geeknik	70
sp1d3rs	62
jobert	51
guido	45
bl4de	42
ryat	40
bigbear_	38
zombiehelp54	37

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Uber disclosed a bug submitted by ak1t4 
Content injection on 404 error page at faspex.uber.com

12 Aug 2016

Uber disclosed a bug submitted by orange 
CBC "cut and paste" attack may cause Open Redirect(even XSS)

12 Aug 2016

Uber disclosed a bug submitted by ddworken 
Enumeration of Invite Codes Allows for Estimating Number of Uber Riders

12 Aug 2016

Twitter disclosed a bug submitted by mazen160 
XSS in the "Poll" Feature on Twitter.com

12 Aug 2016

Uber disclosed a bug submitted by albinowax 
Stored XSS on developer.uber.com via admin account compromise

12 Aug 2016

Mail.Ru disclosed a bug submitted by paresh_parmar 
XSS at af.attachmail.ru

12 Aug 2016

OLX disclosed a bug submitted by konqi 
Arbitrary File Reading

12 Aug 2016

Uber disclosed a bug submitted by nikhil_patil 
Avoiding Surge Pricing

11 Aug 2016

Ubiquiti Networks disclosed a bug submitted by enmach 
Reflected XSS in scores.ubnt.com

11 Aug 2016

Keybase disclosed a bug submitted by franjkovic 
Race conditions can be used to bypass invitation limit

10 Aug 2016

Trello disclosed a bug submitted by mefkan 
Sending Unlimited Mails To Anybody With Easy Social Share Buttons Plugin

10 Aug 2016

Trello disclosed a bug submitted by mefkan 
XSS and Open-Redirect via SVG

10 Aug 2016

Trello disclosed a bug submitted by rajauzairabdullah 
Verification Code Reused For activating 2FA

10 Aug 2016

Maximum disclosed a bug submitted by linkks 
Blind SQL Injection

10 Aug 2016

Coinbase disclosed a bug submitted by rajauzairabdullah 
Create Multiple Account Using Similar X-CSRF token

09 Aug 2016

HackerOne disclosed a bug submitted by xsserboiii 
Reward Money Leakage

09 Aug 2016

SecNews disclosed a bug submitted by malcolmx 
Content spoofing due to the improper behavior of the not-found message

09 Aug 2016

SecNews disclosed a bug submitted by sameoldstory 
Querying private posts and changing post meta

09 Aug 2016

Shopify disclosed a bug submitted by vijay_kumar1110 
Delete/modify your own comment after limited access(IDOR)

09 Aug 2016

Shopify disclosed a bug submitted by vijay_kumar1110 
Staff member can delete Private Apps

09 Aug 2016

1 ... 275 276 277 278 279 ... 391

BY DENIS WERNER - @NOBBD - IMPRESSUM