Top10 publishers:

bobrov	107
linkks	60
sp1d3rs	54
jobert	45
bl4de	39
bigbear_	38
guido	38
isox	36
geeknik	35
4lemon	35

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

VK.com disclosed a bug submitted by tunnelshade 
XSS at http://vk.com on IE using flash files

30 Oct 2015

Keybase disclosed a bug submitted by blakdragon 
Sensitive server-side/application information disclosure

30 Oct 2015

VK.com disclosed a bug submitted by bo0om 
????????? ????????????? javascript-???????? ? ??????????? ????????? ??????????? ????????? ?????? ?????

30 Oct 2015

ownCloud disclosed a bug submitted by testalways 
owncloud.com: WP Super Cache plugin is outdated

30 Oct 2015

Keybase disclosed a bug submitted by geeknik 
xss

30 Oct 2015

withinsecurity disclosed a bug submitted by anshuman_bh 
DDOS using xmlrpc.php

29 Oct 2015

withinsecurity disclosed a bug submitted by protector_47_two 
Uses unsafe-inline without nonce

28 Oct 2015

Yahoo! disclosed a bug submitted by panchocosil 
HTML Injection on flickr screename using IOS App

27 Oct 2015

Mail.Ru disclosed a bug submitted by hiddeneyes_pratikpanchal 
Vulnerability :- "XSS vulnerability"

24 Oct 2015

Shopify disclosed a bug submitted by brakhane 
Some S3 Buckets are world readable (and one is world writeable)

24 Oct 2015

InVision disclosed a bug submitted by deepak_das 
Enumeration and Guessable Email (OWASP-AT-002)T hrough Login Form

23 Oct 2015

Shopify disclosed a bug submitted by juhhga 
Unauthenticated access to details of hidden products in any shop via title emuneration

23 Oct 2015

InVision disclosed a bug submitted by protector_47 
CSRF Token in cookies!

22 Oct 2015

Snapchat disclosed a bug submitted by protector_47 
Vulnerable to JavaScript injection. (WXS) (Javascript injection)!

22 Oct 2015

Shopify disclosed a bug submitted by dvl 
Paid account can review\download any invoice of any other shop

22 Oct 2015

Mail.Ru disclosed a bug submitted by bigbear_ 
[start.icq.com] Reflected XSS via Cookies

21 Oct 2015

Mail.Ru disclosed a bug submitted by bigbear_ 
[riot.mail.ru] Reflected XSS in debug-mode

21 Oct 2015

Shopify disclosed a bug submitted by reactors08 
www.shopify.com XSS on blog pages via sharing buttons

21 Oct 2015

HackerOne disclosed a bug submitted by rohan_x3 
Content spoofing on invitations page

21 Oct 2015

HackerOne disclosed a bug submitted by pranav_hivarekar 
Privileged information of a private/sandboxed program is leaked in json response to an unauthorized user

21 Oct 2015

1 ... 278 279 280 281 282 ... 345

BY DENIS WERNER - @NOBBD - IMPRESSUM