Top10 publishers:

bobrov	114
linkks	75
geeknik	72
sp1d3rs	63
jobert	57
netfuzzer	47
guido	45
bl4de	42
ryat	40
bigbear_	38

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Nextcloud disclosed a bug submitted by m7mdharoun 
Design Issues on ( ??? ) Lead to show ( IPS of Users )

05 Apr 2017

Ruby disclosed a bug submitted by cloudyvirus 
RCE (Remote Code Execution) Vulnerability on Ruby

05 Apr 2017

Quora disclosed a bug submitted by bobrov 
[Android] XSS via start ContentActivity

05 Apr 2017

Trello disclosed a bug submitted by kartik1202 
Rate limiting of incorrect Two Factor Authentication codes not enforced

04 Apr 2017

Souq.com disclosed a bug submitted by mohammedalsaggaf 
reflected xss on search bar (uae.souq.com)

04 Apr 2017

Phabricator disclosed a bug submitted by kevin_c 
An unsafe design practice in the Passphrase may result in Secret being accidentally changed.

04 Apr 2017

shopify-scripts disclosed a bug submitted by ssarong 
Heap Buffer Overflow while processing OP_SEND

03 Apr 2017

shopify-scripts disclosed a bug submitted by ssarong 
Null pointer dereference in 'get_file'

03 Apr 2017

shopify-scripts disclosed a bug submitted by ssarong 
Invalid Pointer Reference from OP_RESCUE

03 Apr 2017

Ubiquiti Networks disclosed a bug submitted by jerusha 
Content Spoofing or Text Injection in (403 forbidden page injection) and Nginx version disclosure via response header

03 Apr 2017

Twitter disclosed a bug submitted by filedescriptor 
DOMXSS in Tweetdeck

02 Apr 2017

Twitter disclosed a bug submitted by yaworsk 
niche s3 buckets are readable/writeable/deleteable by authorized AWS users

02 Apr 2017

shopify-scripts disclosed a bug submitted by dgaletic 
Use-after-free leading to an invalid pointer dereference

02 Apr 2017

QIWI disclosed a bug submitted by bobrov 
[qiwi.com] Information Disclosure

31 Mar 2017

Algolia disclosed a bug submitted by bobrov 
[github.algolia.com] DOM Based XSS github-btn.html

31 Mar 2017

Ubiquiti Networks disclosed a bug submitted by bobrov 
[account-global.ubnt.com] CRLF Injection

31 Mar 2017

Quora disclosed a bug submitted by bobrov 
[controlsyou.quora.com] 429 Too Many Requests Error-Page XSS

31 Mar 2017

Gratipay disclosed a bug submitted by a0xnirudh 
Content length restriction bypass can lead to DOS by reading large files on gip.rocks

31 Mar 2017

Gratipay disclosed a bug submitted by a0xnirudh 
HTTP trace method is enabled on aspen.io

31 Mar 2017

Ubiquiti Networks disclosed a bug submitted by linkks 
sqli

31 Mar 2017

1 ... 275 276 277 278 279 ... 448

BY DENIS WERNER - @NOBBD - IMPRESSUM