Top10 publishers:

bobrov	107
sp1d3rs	54
jobert	41
bigbear_	38
bl4de	37
guido	37
isox	36
4lemon	35
geeknik	35
edio	34

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

HackerOne disclosed a bug submitted by uname 
Anti-MIME-Sniffing header X-Content-Type-Options header has not been set.

28 Apr 2015

HackerOne disclosed a bug submitted by pranav_hivarekar 
Denail of service

28 Apr 2015

HackerOne disclosed a bug submitted by prakharprasad 
Logic Issue with Reputation: Boost Reputation Points

28 Apr 2015

Twitter disclosed a bug submitted by gepeto42 
iOS App can establish Facetime calls without user's permission

27 Apr 2015

Twitter disclosed a bug submitted by avicoder 
Twitter Ads Campaign information disclosure through admin without any authentication.

25 Apr 2015

Vimeo disclosed a bug submitted by satishb3 
A user can add videos to other user's private groups

23 Apr 2015

Dropbox disclosed a bug submitted by haquaman 
SSRF vulnerablity in app webhooks

23 Apr 2015

HackerOne disclosed a bug submitted by killr0x33d 
Open-redirect on hackerone.com

23 Apr 2015

HackerOne disclosed a bug submitted by deepak_das 
Missing spf flags for hackerone.com

23 Apr 2015

Twitter disclosed a bug submitted by filedescriptor 
HTTP Response Splitting (CRLF injection) in report_story

21 Apr 2015

Python disclosed a bug submitted by hugbounter 
Tokenizer crash when processing undecodable source code

21 Apr 2015

Phabricator disclosed a bug submitted by candux 
XSS with Time-of-Day Format

19 Apr 2015

Shopify disclosed a bug submitted by shhnjk 
comment out causes information disclosure

19 Apr 2015

Vimeo disclosed a bug submitted by michelgaschet 
Vimeo + & Vimeo PRO Unautorised Tax bypass

18 Apr 2015

Vimeo disclosed a bug submitted by avlidienbrunn 
URGENT - Subdomain Takeover on status.vimeo.com due to unclaimed domain pointing to statuspage.io

18 Apr 2015

Shopify disclosed a bug submitted by sappi 
IDOR expire other user sessions

17 Apr 2015

Dropbox disclosed a bug submitted by haquaman 
XSS in version history of an HTML file in a shared folder

17 Apr 2015
wont-fix

HackerOne disclosed a bug submitted by rickypaipie 
Reflected File Download attack allows attacker to 'upload' executables to hackerone.com domain

16 Apr 2015

Shopify disclosed a bug submitted by shpendk 
Missing spf flags for myshopify.com

16 Apr 2015

PHP disclosed a bug submitted by ryat 
Type Confusion Vulnerability in SoapClient

16 Apr 2015

1 ... 281 282 283 284 285 ... 327

BY DENIS WERNER - @NOBBD - IMPRESSUM