Top10 publishers:

bobrov	107
sp1d3rs	54
bigbear_	38
guido	37
bl4de	37
jobert	37
isox	36
4lemon	35
geeknik	35
edio	34

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Vimeo disclosed a bug submitted by pranav_hivarekar 
CRITICAL vulnerability - Insecure Direct Object Reference - Unauthorized access to `Videos` of Channel whose privacy is set to `Private`.

18 Mar 2015

HackerOne disclosed a bug submitted by danlec 
Improperly validated fields allows injection of arbitrary HTML via spoofed React objects

18 Mar 2015

PHP disclosed a bug submitted by libnex 
ZIP Integer Overflow leads to writing past heap boundary

18 Mar 2015

PHP disclosed a bug submitted by ryat 
Use After Free Vulnerability in unserialize()

17 Mar 2015

PHP disclosed a bug submitted by ryat 
Use after free vulnerability in unserialize() with DateInterval

17 Mar 2015

Slack disclosed a bug submitted by shahmeer_amir 
Reflective XSS can be triggered in IE

15 Mar 2015

OpenSSL disclosed a bug submitted by geeknik 
X509_to_X509_REQ NULL pointer deref

15 Mar 2015

Nearby Live disclosed a bug submitted by corb3nik 
Gain access to any user's email address

14 Mar 2015

Twitter disclosed a bug submitted by seifelsallamy 
open redirect sends authenticity_token to any website or (ip address)

14 Mar 2015

Twitter disclosed a bug submitted by wesecureapp 
getting emails of users/removing them from victims account [using typical attack]

13 Mar 2015

Vimeo disclosed a bug submitted by shahmeer_amir 
Red October 1511493148.cloud.vimeo.com

13 Mar 2015

IRCCloud disclosed a bug submitted by jackds 
Email verification links still valid after changing it 2x

13 Mar 2015
wont-fix

Coinbase disclosed a bug submitted by whitj00 
Credit Card Validation Issue

12 Mar 2015

HackerOne disclosed a bug submitted by guido 
Substantially weakened authenticity verification when using 'Remember me for a week'

12 Mar 2015
wont-fix

concrete5 disclosed a bug submitted by yujitounai 
Stored XSS in concrete5 5.7.0.4.

11 Mar 2015

Flash disclosed a bug submitted by hhj4ck 
Adobe Flash Player MP4 Use-After-Free Vulnerability

11 Mar 2015

Flash disclosed a bug submitted by hhj4ck 
Adobe Flash Player Out-of-Bound Read/Write Vulnerability

11 Mar 2015

Flash disclosed a bug submitted by hhj4ck 
Adobe Flash Player MP4 Use-After-Free Vulnerability

11 Mar 2015

Coinbase disclosed a bug submitted by prashanthvarma 
open authentication bug

11 Mar 2015

HackerOne disclosed a bug submitted by dragonfly 
Auto Approval of Invitation to join Team as a Team member

11 Mar 2015

1 ... 278 279 280 281 282 ... 321

BY DENIS WERNER - @NOBBD - IMPRESSUM