Top10 publishers:

bobrov	107
sp1d3rs	54
jobert	45
bl4de	39
bigbear_	38
guido	38
isox	36
4lemon	35
linkks	35
geeknik	35

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Flox disclosed a bug submitted by pradeepch99 
Content spoofing through Referel header

29 Aug 2015

Keybase disclosed a bug submitted by mafia 
NO SPF RECORDS

28 Aug 2015

Keybase disclosed a bug submitted by mom 
SMTP protection not used

28 Aug 2015

Phabricator disclosed a bug submitted by jbeta 
Dashboard panel embedded onto itself causes a denial of service

27 Aug 2015

concrete5 disclosed a bug submitted by jmpalk 
No csrf protection on index.php/ccm/system/user/add_group, index.php/ccm/system/user/remove_group

26 Aug 2015

concrete5 disclosed a bug submitted by jmpalk 
No CSRF protection when creating new community points actions, and related stored XSS

26 Aug 2015

DigitalSellz disclosed a bug submitted by s_p_q_r 
The email updates issues

25 Aug 2015

DigitalSellz disclosed a bug submitted by s_p_q_r 
The product/status method CSRF

25 Aug 2015

Shopify disclosed a bug submitted by alpha 
SSRF via 'Insert Image' feature of Products/Collections/Frontpage

24 Aug 2015

Zaption disclosed a bug submitted by aaj 
Open redirect filter bypass

24 Aug 2015

Shopify disclosed a bug submitted by 00day 
XSS https://delivery.shopifyapps.com/ (Digital Downloads App in myshopify.com)

24 Aug 2015

PHP disclosed a bug submitted by haquaman 
Null pointer deref (segfault) in spl_autoload via ob_start

23 Aug 2015

Gratipay disclosed a bug submitted by bobrov 
[gratipay.com] CRLF Injection

20 Aug 2015

Yahoo! disclosed a bug submitted by panchocosil 
Store XSS Flicker main page

14 Aug 2015

Yahoo! disclosed a bug submitted by kyprizel 
XSS using yql and developers console proxy

14 Aug 2015

Yahoo! disclosed a bug submitted by agarri_fr 
Bypass of anti-SSRF defenses in YahooCacheSystem (affecting at least YQL and Pipes)

14 Aug 2015

Yahoo! disclosed a bug submitted by jordanmilne 
Security.allowDomain("*") in SWFs on img.autos.yahoo.com allows data theft from Yahoo Mail (and others)

14 Aug 2015

Yahoo! disclosed a bug submitted by mildata 
XSS in my yahoo

14 Aug 2015

Yahoo! disclosed a bug submitted by adrianbelen 
clickjacking

14 Aug 2015

Yahoo! disclosed a bug submitted by 0ctac0der 
Authentication Bypass in Yahoo Groups

14 Aug 2015

1 ... 280 281 282 283 284 ... 339

BY DENIS WERNER - @NOBBD - IMPRESSUM