Top10 publishers:

bobrov	113
linkks	69
geeknik	62
sp1d3rs	61
jobert	49
guido	45
ryat	40
bl4de	39
bigbear_	38
isox	36

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

APITest.IO disclosed a bug submitted by mogli 
Clickjacking: X-Frame-Options header missing

12 May 2016

LocalTapiola disclosed a bug submitted by konqi 
Source Code Disclosure on out of scope domain viestinta.lahitapiola.fi

12 May 2016

LocalTapiola disclosed a bug submitted by maxy 
Amazon Bucket Accessible (http://inpref.s3.amazonaws.com/)

12 May 2016

HackerOne disclosed a bug submitted by apok 
Inadequate access controls in "Vote" functionality???

12 May 2016

Uber disclosed a bug submitted by rohk 
Mass Assignment Vulnerability in partners.uber.com

09 May 2016

Algolia disclosed a bug submitted by djamel-ghorab 
text injection can be used in phishing 404 page should not include attacker text

09 May 2016

Uber disclosed a bug submitted by iad 
XSS on love.uber.com

09 May 2016

Uber disclosed a bug submitted by e3xpl0it 
Dom Based Xss

09 May 2016

Uber disclosed a bug submitted by blueberryinfosec 
Session retention is present which reveals the customer info

09 May 2016

Uber disclosed a bug submitted by mdv 
Reflected XSS via Unvalidated / Open Redirect in uber.com

09 May 2016

Uber disclosed a bug submitted by kirit1193 
CRLF Injection in developer.uber.com

09 May 2016

Uber disclosed a bug submitted by ddworken 
Stored XSS in archive.uber.com Due to Injection of Javascript:alert(0)

09 May 2016

Uber disclosed a bug submitted by ddworken 
CrashPlan Backup is Vulnerable Allowing to a DoS Attack Against Uber's Backups to ```backup.uber.com```

09 May 2016

New Relic disclosed a bug submitted by mimieux 
Stored Cross-Site Scripting via Angular Template Injection

09 May 2016

Uber disclosed a bug submitted by mdv 
Reflected XSS via Livefyre Media Wall in newsroom.uber.com

09 May 2016

Dovecot disclosed a bug submitted by bdwhitehat 
Cross-Site Scripting Vulnerability in dovecot.fi

09 May 2016

Dropbox disclosed a bug submitted by gone 
Dropbox apps Server side request forgery

09 May 2016

Uber disclosed a bug submitted by siddiki 
XSS @ love.uber.com

07 May 2016

Uber disclosed a bug submitted by djadmin 
Cross-site Scripting (XSS)

06 May 2016

ThisData disclosed a bug submitted by dirtycoder 
STORED XSS FOUND

06 May 2016

1 ... 283 284 285 286 287 ... 374

BY DENIS WERNER - @NOBBD - IMPRESSUM