Top10 publishers:

bobrov	114
linkks	73
geeknik	71
sp1d3rs	62
jobert	52
guido	45
bl4de	42
ryat	40
bigbear_	38
zombiehelp54	37

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

OLX disclosed a bug submitted by cablej 
CSRF in account configuration leads to complete account compromise

05 Oct 2016

Nextcloud disclosed a bug submitted by drosera 
Slow Http attack on nextcloud(DOS)

05 Oct 2016

Nextcloud disclosed a bug submitted by bastianwelfrid 
Arbitrary File Upload in Logo & Log in image Theming setting.

05 Oct 2016

Trello disclosed a bug submitted by theflofly 
File access using image tragick

05 Oct 2016

WebSummit disclosed a bug submitted by rubyroobs 
Reflected xss on websummit.net

04 Oct 2016

ok.ru disclosed a bug submitted by hamooda_anonphantom 
Xss in m.ok.ru

04 Oct 2016

Harvest disclosed a bug submitted by eboda 
Leak of all project names and all user names , even across applications

04 Oct 2016

RubyGems disclosed a bug submitted by c0rte 
Password Reset emails missing TLS leads account takeover

04 Oct 2016

Pornhub disclosed a bug submitted by 5haked 
[RCE] Unserialize to XXE - file disclosure on ams.upload.pornhub.com

03 Oct 2016

Pornhub disclosed a bug submitted by clubjk 
XSS ReflectedGET /*embed_player*?

03 Oct 2016

Pornhub disclosed a bug submitted by clubjk 
XSS Reflected incategories*p

03 Oct 2016

HackerOne disclosed a bug submitted by rbcafe 
Obtain the username & the uid of the one doing the S3 sync on Hackerone

03 Oct 2016

Pornhub disclosed a bug submitted by jouko 
SSRF & XSS (W3 Total Cache)

03 Oct 2016

Romit disclosed a bug submitted by gone 
[CRITICAL]-Taking over entire subdomain of romit.io

03 Oct 2016

Mail.Ru disclosed a bug submitted by bobrov 
[rabota.mail.ru] Open Redirect

03 Oct 2016

Mail.Ru disclosed a bug submitted by bobrov 
[my.mail.ru] CRLF Injection

03 Oct 2016

Mail.Ru disclosed a bug submitted by bobrov 
[s.mail.ru] CRLF Injection

03 Oct 2016

Mail.Ru disclosed a bug submitted by bobrov 
[upload-X.my.mail.ru] /uploadphoto Insecure Direct Object References

03 Oct 2016

Mail.Ru disclosed a bug submitted by bobrov 
[my.mail.ru] HTML injection ? ??????? ?? myadmin@corp.mail.ru

03 Oct 2016

Slack disclosed a bug submitted by sudotop 
Open Redirect on slack.com

02 Oct 2016

1 ... 276 277 278 279 280 ... 406

BY DENIS WERNER - @NOBBD - IMPRESSUM