Top10 publishers:

bobrov	70
sp1d3rs	52
bigbear_	38
bl4de	37
guido	37
isox	36
edio	34
4lemon	34
geeknik	33
jobert	33

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

IRCCloud disclosed a bug submitted by gunda 
Log Out Cross site Request Forgery

13 Jun 2014

Coin.co disclosed a bug submitted by anshuman_bh 
Coin.co Admin interface accessible externally

13 Jun 2014
wont-fix

Phabricator disclosed a bug submitted by tunnelshade 
Abusing VCS control on phabricator

13 Jun 2014

HackerOne disclosed a bug submitted by siddiki 
Adding an user email address to the list before confirming.

11 Jun 2014
wont-fix

Minr.es disclosed a bug submitted by nahamsec 
readable .htaccess

11 Jun 2014

Mail.Ru disclosed a bug submitted by siddiki 
No CSRF token used in Phone Verification POST

11 Jun 2014
wont-fix

Ian Dunn disclosed a bug submitted by siddiki 
PHP and Wordpress version disclosure

11 Jun 2014
wont-fix

RelateIQ disclosed a bug submitted by siddiki 
Old Sessions remain valid after the password change.

11 Jun 2014
wont-fix

OkCupid disclosed a bug submitted by quistertow 
XSS - okcupid.com

10 Jun 2014

Factlink disclosed a bug submitted by robin 
Url Redirection

10 Jun 2014
wont-fix

HackerOne disclosed a bug submitted by guido 
Session not invalidated after password reset

10 Jun 2014

concrete5 disclosed a bug submitted by smiegles 
/index.php/dashboard/sitemap/explore/ Cross-site scripting

09 Jun 2014

concrete5 disclosed a bug submitted by smiegles 
dashboard/pages/types [Unknown column 'Array' in 'where clause'] disclosure.

09 Jun 2014

concrete5 disclosed a bug submitted by smiegles 
CONCRETE5 - path disclosure.

09 Jun 2014

Secret disclosed a bug submitted by siddiki 
Login CSRF in Secret.ly

09 Jun 2014

Yahoo! disclosed a bug submitted by joserabal 
Bypass of the Clickjacking protection on Flickr using data URL in iframes

06 Jun 2014

Coinbase disclosed a bug submitted by ryancollins 
2 factor authentication design flaw

06 Jun 2014

Mail.Ru disclosed a bug submitted by mlik120 
Clickjacking

06 Jun 2014

Mail.Ru disclosed a bug submitted by bitquark 
Home page reflected XSS

06 Jun 2014

Coinbase disclosed a bug submitted by 0ctac0der 
CSRF in function "Set as primary" on accounts page

06 Jun 2014

1 ... 282 283 284 285 286 ... 299

BY DENIS WERNER - @NOBBD - IMPRESSUM