Top10 publishers:

bobrov	107
linkks	60
sp1d3rs	56
jobert	46
guido	41
bl4de	39
bigbear_	38
isox	36
geeknik	35
4lemon	35

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Udemy disclosed a bug submitted by adrianbelen 
leak receipt of another user

13 Nov 2015

Zendesk disclosed a bug submitted by zombiehelp54 
Stored XSS in comments

13 Nov 2015

Mail.Ru disclosed a bug submitted by bigbear_ 
[ling.go.mail.ru] Server-Status opened for all users

13 Nov 2015

Binary.com disclosed a bug submitted by paulos_ 
Cross Site Scripting

13 Nov 2015

ownCloud disclosed a bug submitted by mohammedalsaggaf 
owncloud.com: Content Sniffing not disabled

12 Nov 2015

Shopify disclosed a bug submitted by elamaran619 
Privilege escalation and circumvention of permission to limited access user

11 Nov 2015

Slack disclosed a bug submitted by hassham 
File upload XSS (Java applet) on http://slackatwork.com/

11 Nov 2015

Slack disclosed a bug submitted by harry_mg 
Self-XSS in posts by formatting text as code

10 Nov 2015

Shopify disclosed a bug submitted by shahmeer-amir 
Accessing Payments page and adding payment methods with limited access accounts

10 Nov 2015

Shopify disclosed a bug submitted by shahmeer-amir 
Missing authorization check on dashboard overviews

10 Nov 2015

Slack disclosed a bug submitted by harry_mg 
Stored XSS in Slack (weird, trial and error)

10 Nov 2015

Shopify disclosed a bug submitted by brakhane 
A 'Full access' administrator is able to see the shop owners user details

10 Nov 2015

Shopify disclosed a bug submitted by rms 
List of devices is accessible regardless of the account limitations

10 Nov 2015

Slack disclosed a bug submitted by harry_mg 
Reflected Self-XSS in Slack

10 Nov 2015

Shopify disclosed a bug submitted by brakhane 
'Limited' RCE in certain places where Liquid is accepted

10 Nov 2015

Udemy disclosed a bug submitted by robd4k 
XSS Vulnerability

09 Nov 2015

Shopify disclosed a bug submitted by hazimaslam 
First & Last Name Disclosure of any Shopify Store Admin

09 Nov 2015

ownCloud disclosed a bug submitted by tomdev 
RCE in ci.owncloud.com / ci.owncloud.org

09 Nov 2015

Python disclosed a bug submitted by johnleitch 
PyFloat_FromString & PyNumber_Long Buffer Over-reads

08 Nov 2015

Shopify disclosed a bug submitted by hazimaslam 
Unauthorized access to any Store Admin's First & Last name

07 Nov 2015

1 ... 281 282 283 284 285 ... 350

BY DENIS WERNER - @NOBBD - IMPRESSUM