Top10 publishers:

bobrov	107
sp1d3rs	54
bigbear_	38
guido	37
bl4de	37
isox	36
geeknik	35
4lemon	35
edio	34
jobert	34

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

PHP disclosed a bug submitted by endeavor 
Free called on unitialized pointer in exif.c

20 Jan 2015

PHP disclosed a bug submitted by sesser 
Use after free vulnerability in unserialize()

20 Jan 2015

Localize disclosed a bug submitted by pouya 
PHP PDOException and Full Path Disclosure

18 Jan 2015

Revert disclosed a bug submitted by internetwache 
Missing SPF header on revert.io

18 Jan 2015

QIWI disclosed a bug submitted by fishumu 
Metadata in hosted files is disclosing Usernames, Printers, paths, admin guides. emails

18 Jan 2015
wont-fix

Openfolio disclosed a bug submitted by harshafriend4all 
xss in /browse/contacts/

14 Jan 2015

Phabricator disclosed a bug submitted by nullsub 
Phabricator Phame Blog Skins Local File Inclusion

14 Jan 2015

Informatica disclosed a bug submitted by dreamzz 
Missing SPF for informatica.com

12 Jan 2015
wont-fix

Slack disclosed a bug submitted by fransrosen 
Facebook Takeover using Slack using 302 from files.slack.com with access_token

11 Jan 2015

Mail.Ru disclosed a bug submitted by 4lemon 
Stored XSS on http://top.mail.ru

10 Jan 2015

Phabricator disclosed a bug submitted by nullsub 
Phabricator Diffusion application allows unauthorized users to delete mirrors

09 Jan 2015

Vimeo disclosed a bug submitted by artem 
APIs for channels allow HTML entities that may cause XSS issue

08 Jan 2015

The Internet disclosed a bug submitted by isciurus 
libcurl: URL request injection

08 Jan 2015

Twitter disclosed a bug submitted by sappi 
No rate limiting on creating lists

06 Jan 2015
wont-fix

Twitter disclosed a bug submitted by batuhan 
Notifications can mark as read by CSRF

03 Jan 2015
wont-fix

Uzbey LLC disclosed a bug submitted by anonymous_india 
Suck My Motherfucking Dick

01 Jan 2015
wont-fix

Block.io disclosed a bug submitted by shivathegame 
Bypassed or command injection

01 Jan 2015
wont-fix

Twitter disclosed a bug submitted by shivathegame 
Homograph attack.

01 Jan 2015
wont-fix

Twitter disclosed a bug submitted by missoum1307 
URGENT - Subdomain Takeover on users.tweetdeck.com , the same issue of report #32825

01 Jan 2015

PHP disclosed a bug submitted by geeknik 
out of bounds read crashes php-cgi

30 Dec 2014

1 ... 275 276 277 278 279 ... 313

BY DENIS WERNER - @NOBBD - IMPRESSUM