Top10 publishers:

bobrov	114
linkks	75
geeknik	72
sp1d3rs	63
jobert	57
netfuzzer	47
guido	45
bl4de	42
ryat	40
bigbear_	38

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

ok.ru disclosed a bug submitted by 4lemon 
Stored XSS ? ????? ????? (2) ?? ????????? ?????.

20 Mar 2017

ok.ru disclosed a bug submitted by 4lemon 
???????=>?????? ?????, ??????? ?? ????????????? ??? ???????

20 Mar 2017

Trello disclosed a bug submitted by rashedhasan007 
Phone verification code fails to expire and can be used multiple times also in different accounts to verify same cellphone number on Trello.com

20 Mar 2017

Trello disclosed a bug submitted by rashedhasan007 
Email authentication token fails to expire and can be used multiple times for same Email address on Trello.com

20 Mar 2017

Xero disclosed a bug submitted by atik-rahman 
Open-redirect on login.xero.com

20 Mar 2017

New Relic disclosed a bug submitted by intricate 
Open Redirect

20 Mar 2017

New Relic disclosed a bug submitted by nuc 
Cache purge requests are not authenticated

20 Mar 2017

New Relic disclosed a bug submitted by xiaulhxsnain 
Session Hijacking

20 Mar 2017

New Relic disclosed a bug submitted by sinkmanu 
XSS in a newrelic.com site

20 Mar 2017

New Relic disclosed a bug submitted by kamil_hism 
JIRA account misconfig causes internal info leak

20 Mar 2017

New Relic disclosed a bug submitted by amit29sept 
CSRF - Delete all empty application policy

20 Mar 2017

New Relic disclosed a bug submitted by amit29sept 
CSRF- delete all empty server policy

20 Mar 2017

New Relic disclosed a bug submitted by geeknik 
https://rpm.newrelic.com/login vulnerable to host header attack

20 Mar 2017

New Relic disclosed a bug submitted by daniyal_nasir 
No Rate Limitation on Promo Code

20 Mar 2017

New Relic disclosed a bug submitted by itly 
Reflected XSS on Signup Page

20 Mar 2017

New Relic disclosed a bug submitted by apt 
Unauthorized Access

20 Mar 2017

New Relic disclosed a bug submitted by waqar_vicky 
A Signup page does not properly validate the authenticity token at the server side.

20 Mar 2017

New Relic disclosed a bug submitted by waqar_vicky 
A Log in page does not properly validate the authenticity token at the server side

20 Mar 2017

LocalTapiola disclosed a bug submitted by mr_edwards 
Brute force unsubscription on /webApp/unsub_sb (viestinta.lahitapiola.fi)

19 Mar 2017

LocalTapiola disclosed a bug submitted by billy_blaze 
XSS on 3rd party service Localtapiola is using

18 Mar 2017

1 ... 278 279 280 281 282 ... 447

BY DENIS WERNER - @NOBBD - IMPRESSUM