Top10 publishers:

bobrov	114
linkks	75
geeknik	72
sp1d3rs	63
jobert	57
netfuzzer	47
guido	45
bl4de	42
ryat	40
bigbear_	38

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Alvosec disclosed a bug submitted by zephrfish 
[ns2.????] Vulnerable to DNS Zone Transfer

17 Mar 2017

FormAssembly disclosed a bug submitted by edio 
formassembly.com is vulnerable to padding-oracle attacks.

17 Mar 2017

Moneybird disclosed a bug submitted by yaworsk 
Stored Cross Site Scripting in Customer Name

17 Mar 2017

Rockstar Games disclosed a bug submitted by d1v3r 
Source Code Disclosure (CGI)

17 Mar 2017

Rockstar Games disclosed a bug submitted by zombiehelp54 
DOM based reflected XSS in rockstargames.com/newswire/tags through cross domain ajax request

17 Mar 2017

Mail.Ru disclosed a bug submitted by mrityunjoy-emu 
Open Redirect

17 Mar 2017

Mail.Ru disclosed a bug submitted by ahsantahir 
[allods.mail.ru] Cross-Site Request Forgery (Add-Item)

17 Mar 2017

Mail.Ru disclosed a bug submitted by anas_roubi 
CSRF Send a message at street-combats.mail.ru

17 Mar 2017

Moneybird disclosed a bug submitted by 4lemon 
XXE issue

17 Mar 2017

Moneybird disclosed a bug submitted by 4lemon 
Stored XSS thru SVG upload

17 Mar 2017

Rockstar Games disclosed a bug submitted by nahamsec 
Reflected XSS via #tags= while using a callback in newswire http://www.rockstargames.com/newswire

16 Mar 2017

Pornhub disclosed a bug submitted by jon_bottarini 
[xss] pornhubpremium.com, /redeem?code= URL endpoint

16 Mar 2017

U.S. Dept Of Defense disclosed a bug submitted by korprit 
File upload vulnerability on a DoD website

16 Mar 2017

U.S. Dept Of Defense disclosed a bug submitted by jon_bottarini 
HTML Injection/Load Images vulnerability on a DoD website

16 Mar 2017

U.S. Dept Of Defense disclosed a bug submitted by jon_bottarini 
Stored cross-site scripting (XSS) on a DoD website

16 Mar 2017

U.S. Dept Of Defense disclosed a bug submitted by mantis 
Misconfigured user account settings on DoD website

16 Mar 2017

U.S. Dept Of Defense disclosed a bug submitted by scraps 
Potentially sensitive information disclosure on a DoD website

16 Mar 2017

U.S. Dept Of Defense disclosed a bug submitted by ahsantahir 
Arbitrary Script Injection (Mail) in a DoD Website

16 Mar 2017

U.S. Dept Of Defense disclosed a bug submitted by japp1 
Remote command execution (RCE) vulnerability on a DoD website

16 Mar 2017

U.S. Dept Of Defense disclosed a bug submitted by mr_47 
Information disclosure on a DoD website

16 Mar 2017

1 ... 281 282 283 284 285 ... 448

BY DENIS WERNER - @NOBBD - IMPRESSUM