Top10 publishers:

bobrov	107
sp1d3rs	54
bigbear_	38
guido	37
bl4de	37
isox	36
geeknik	35
4lemon	35
edio	34
jobert	34

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

RelateIQ disclosed a bug submitted by shahmeer_amir 
Resubmitted with POC #18685 Password reset CSRF

16 Sep 2014

Automattic disclosed a bug submitted by pranav_hivarekar 
User Enumeration and Guessable User Account Attack on WORDPRESS

13 Sep 2014
wont-fix

Mail.Ru disclosed a bug submitted by vah13 
SQL inj

12 Sep 2014

HackerOne disclosed a bug submitted by thetime 
Redirect while opening links in new tabs

12 Sep 2014

Phabricator disclosed a bug submitted by djadmin 
Content spoofing

11 Sep 2014
wont-fix

Mail.Ru disclosed a bug submitted by chandrakant 
Reflected XSS

10 Sep 2014

CloudFlare disclosed a bug submitted by chandrakant 
System Status Update CSRF

10 Sep 2014

Phabricator disclosed a bug submitted by xtross 
Forgot Password Issue

10 Sep 2014

Mail.Ru disclosed a bug submitted by stalker 
Version Disclosure (NginX)

10 Sep 2014
wont-fix

IRCCloud disclosed a bug submitted by harshafriend4all 
CSRF to Account Take Over Bug

08 Sep 2014

Twitter disclosed a bug submitted by harshafriend4all 
CSRF in crashlytics.com

08 Sep 2014

CloudFlare disclosed a bug submitted by robincool031 
csrf on password change functionality

07 Sep 2014

StopTheHacker disclosed a bug submitted by robincool031 
Reflected cross site scripting in login page

07 Sep 2014

Automattic disclosed a bug submitted by simon90 
XSS on gravatar

07 Sep 2014

Phabricator disclosed a bug submitted by andy_r 
Password Reset Links Not Expiring

06 Sep 2014
wont-fix

WePay disclosed a bug submitted by pinoy 
Sensitive settings need Re authentication

05 Sep 2014
wont-fix

Slack disclosed a bug submitted by simon90 
Password Policy issue (Weak Protect)

04 Sep 2014

Slack disclosed a bug submitted by asdjsonyou 
Content Spoofing all Integrations in https://team.slack.com/services/new/

03 Sep 2014

HackerOne disclosed a bug submitted by siddiki 
Notification of previous signed out user leakage.

01 Sep 2014
wont-fix

Twitter disclosed a bug submitted by mohdhaji87 
Password reset link not validated.

31 Aug 2014
wont-fix

1 ... 283 284 285 286 287 ... 313

BY DENIS WERNER - @NOBBD - IMPRESSUM