Top10 publishers:

bobrov	114
linkks	73
geeknik	70
sp1d3rs	62
jobert	51
guido	45
bl4de	42
ryat	40
bigbear_	38
zombiehelp54	37

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Nextcloud disclosed a bug submitted by ishahriyar 
Nextcloud server software: Content Spoofing

19 Jul 2016

Shopify disclosed a bug submitted by zombiehelp54 
Stealing livechat token and using it to chat as the user - user information disclosure

19 Jul 2016

drchrono disclosed a bug submitted by 1337_inj3c70r 
Bug Report

19 Jul 2016

Shopify disclosed a bug submitted by zseano 
https://windsor.shopify.com/ takeover

18 Jul 2016

Nextcloud disclosed a bug submitted by bug_cat 
newsletter.nextcloud.com: Bypass firewall protection

18 Jul 2016

Nextcloud disclosed a bug submitted by roshanpty 
The application uses basic authentication.

18 Jul 2016

Mail.Ru disclosed a bug submitted by hunter 
Possibility to attach any mobile number to any email

18 Jul 2016

OLX disclosed a bug submitted by c4u53 
Reflected XSS at yaman.olx.ph

18 Jul 2016

Nextcloud disclosed a bug submitted by secureashishpathak 
nextcloud.com: Mail Bombing ( No Rate Limiting On Sending Emails On Contact us Page)

17 Jul 2016

Shopify disclosed a bug submitted by fin1te 
Potentially Sensitive Information on GitHub

17 Jul 2016

Shopify disclosed a bug submitted by fin1te 
Authentication Bypass on Icinga monitoring server

17 Jul 2016

Gratipay disclosed a bug submitted by roshanpty 
The contribution save option seem to be vulnerable to CSRF

17 Jul 2016

Nextcloud disclosed a bug submitted by arbaz_hussain 
stats.nextcloud.com: Content Injection

17 Jul 2016

Ian Dunn disclosed a bug submitted by hacklikeapro 
User enumeration in wp-admin

16 Jul 2016

Ian Dunn disclosed a bug submitted by anant 
Multiple Path Disclosure

16 Jul 2016

Xero disclosed a bug submitted by psychomantis 
Additonal stored XSS in Add note/Expected payment Date

16 Jul 2016

HackerOne disclosed a bug submitted by yaworsk 
Report title and issue information prepopulated

15 Jul 2016

Uber disclosed a bug submitted by jouko 
OneLogin authentication bypass on WordPress sites via XMLRPC

15 Jul 2016

Keybase disclosed a bug submitted by sarwarjahan 
Un-handled exception leads to Information Disclosure

15 Jul 2016

Gratipay disclosed a bug submitted by secbughunter 
stop serving grtp.co over HTTP

15 Jul 2016

1 ... 281 282 283 284 285 ... 391

BY DENIS WERNER - @NOBBD - IMPRESSUM