Top10 publishers:

bobrov	76
sp1d3rs	54
bigbear_	38
bl4de	37
guido	37
isox	36
edio	34
4lemon	34
jobert	34
geeknik	33

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

DigitalSellz disclosed a bug submitted by faisalahmed 
USER Account is not being deleted after user "Delete Account" from DASHBOARD

17 Aug 2014

Mail.Ru disclosed a bug submitted by vah13 
SQL

16 Aug 2014

Secret disclosed a bug submitted by mohaab007 
secret app for iOS and android is sending some info over HTTP

16 Aug 2014

Twitter disclosed a bug submitted by mohaab007 
uclfinal.twitter.com and euro2012.twitter.com are vulnerable to CRIME attack

16 Aug 2014
wont-fix

Automattic disclosed a bug submitted by mohaab007 
Top 10 2013-A2-Broken Authentication and Session Management - wordpress.com

16 Aug 2014
wont-fix

Envoy disclosed a bug submitted by anshuman_bh 
Stored XSS on sign_up page

16 Aug 2014

Envoy disclosed a bug submitted by anshuman_bh 
Stored XSS on adding locations

16 Aug 2014

Automattic disclosed a bug submitted by mohaab007 
Missing HSTS header in https://app.simplenote.com

16 Aug 2014
wont-fix

Twitter disclosed a bug submitted by jpsecurityresearch 
XSS ON MOPUB.COM

15 Aug 2014

Detectify disclosed a bug submitted by shahmeer_amir 
No logout mechanism due cookie tampering

15 Aug 2014
wont-fix

Slack disclosed a bug submitted by ashesh 
TLS1/SSLv3 Renegotiation Vulnerability

14 Aug 2014
wont-fix

Envoy disclosed a bug submitted by tdthechamp 
Authentication Bypass

14 Aug 2014
wont-fix

Factlink disclosed a bug submitted by shahmeer_amir 
Click-Jacking due to missing X-frame header

13 Aug 2014
wont-fix

Phabricator disclosed a bug submitted by tunnelshade 
XSS in editor by any user

13 Aug 2014

Slack disclosed a bug submitted by cliffordtrigo 
Content Spoofing

11 Aug 2014
wont-fix

Automattic disclosed a bug submitted by jeroldcamacho 
xss in simperium.com

10 Aug 2014

Automattic disclosed a bug submitted by niks 
privilege escalation

10 Aug 2014

Localize disclosed a bug submitted by jeroldcamacho 
missing sender policy framework (SPF)

09 Aug 2014

Envoy disclosed a bug submitted by shahmeer_amir 
Too much sensitive information in GET https://signwithenvoy.com/device_config/preview_badge

09 Aug 2014
wont-fix

CloudFlare disclosed a bug submitted by smiegles 
jplayer.swf Cross-site scripting

08 Aug 2014

1 ... 280 281 282 283 284 ... 307

BY DENIS WERNER - @NOBBD - IMPRESSUM