Top10 publishers:

bobrov	109
linkks	64
sp1d3rs	56
jobert	48
guido	42
bl4de	39
bigbear_	38
isox	36
geeknik	35
4lemon	35

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Automattic disclosed a bug submitted by skansing 
Internal GET SSRF via CSRF with Press This scan feature

04 Mar 2016

Twitter disclosed a bug submitted by wesecureapp 
Tweet Deck XSS- Persistent- Group DM name

04 Mar 2016

Coinbase disclosed a bug submitted by josephjose96 
Misconfiguration in 2 factor allows sensitive data expose

04 Mar 2016

Imgur disclosed a bug submitted by benmassaoud 
risk of having secure=false in a crossdomain.xml

03 Mar 2016

ownCloud disclosed a bug submitted by eugui 
DROWN Attack

03 Mar 2016

Informatica disclosed a bug submitted by artem 
[community.informatica.com] - CSRF in Private Messages allows to move user's messages to Trash

02 Mar 2016

ownCloud disclosed a bug submitted by gamhody_ 
No Any Kind of Protection on Delete account

02 Mar 2016

Ruby on Rails disclosed a bug submitted by jyotisingh 
Regarding [CVE-2016-0752] Possible Information Leak Vulnerability in Action View

01 Mar 2016

Ruby on Rails disclosed a bug submitted by kratob2 
Remote code execution using render :inline

01 Mar 2016

Shopify disclosed a bug submitted by mdv 
XSS on hardware.shopify.com

01 Mar 2016

Shopify disclosed a bug submitted by derision 
File name and folder enumeration.

01 Mar 2016

Shopify disclosed a bug submitted by pouya 
create staff member without owner access

29 Feb 2016

Gratipay disclosed a bug submitted by try_hack_x 
Sub Domian Take over

28 Feb 2016

Coinbase disclosed a bug submitted by datokaa 
Balance Manipulation - BUG

26 Feb 2016

LeaseWeb disclosed a bug submitted by cliffordtrigo 
DOM Based XSS in Checkout

26 Feb 2016

ownCloud disclosed a bug submitted by mrsihag 
The csrf token remains same after user logs in

25 Feb 2016

KIWI.KI GmbH disclosed a bug submitted by paresh_parmar 
Subdomain takeover : URGENT

25 Feb 2016

Udemy disclosed a bug submitted by decay 
Reflected XSS and/or malicious redirection via JWPlayer 6 configuration modification

24 Feb 2016

HackerOne disclosed a bug submitted by zombiehelp54 
Interstitial redirect bypass / open redirect in https://hackerone.com/zendesk_session

24 Feb 2016

HackerOne disclosed a bug submitted by yaworsk 
Unintended HTML inclusion as a result of https://hackerone.com/reports/110578

24 Feb 2016

1 ... 282 283 284 285 286 ... 361

BY DENIS WERNER - @NOBBD - IMPRESSUM