Top10 publishers:

bobrov	70
sp1d3rs	52
bigbear_	38
bl4de	37
guido	37
isox	36
edio	34
4lemon	34
geeknik	33
jobert	33

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

4chan disclosed a bug submitted by shahmeer_amir 
Login panel brute force attack

06 Jun 2014
wont-fix

Yahoo! disclosed a bug submitted by santese 
Server Side Request Forgery

05 Jun 2014

Factlink disclosed a bug submitted by chandrakant 
Sign up CSRF

05 Jun 2014

Factlink disclosed a bug submitted by shahriar 
Password reset link doesn't expire.

05 Jun 2014

MS-DOS disclosed a bug submitted by dhaval 
Injecting Distrust and Disbelief in Addicted Gamers

04 Jun 2014

99designs disclosed a bug submitted by smilez_hapiez 
Insecure transition from HTTP to HTTPS in form post

04 Jun 2014
wont-fix

Factlink disclosed a bug submitted by bitquark 
Proxy service crash DoS

04 Jun 2014

Factlink disclosed a bug submitted by jaikeysarraf 
Anonymous Proxy and IP leak

04 Jun 2014

Automattic disclosed a bug submitted by khairalhamad 
Serving Transitions From: HTTP Protocol (not secure)

04 Jun 2014
wont-fix

RelateIQ disclosed a bug submitted by shahmeer_amir 
Wildcard DNS in website

01 Jun 2014

Slack disclosed a bug submitted by karshxz7593 
Stored XSS Found

01 Jun 2014

Slack disclosed a bug submitted by kadaba 
open redirect in https://slack.com

31 May 2014
wont-fix

InVision disclosed a bug submitted by xss 
TLS Renegotiation and Denial of Service Attacks on InVision.

30 May 2014
wont-fix

Mail.Ru disclosed a bug submitted by vinod 
Admin panel of http://tp-test1.corp.mail.ru/ is acccessible publicly

30 May 2014

Mail.Ru disclosed a bug submitted by vahagn 
SQL inj

30 May 2014

Detectify disclosed a bug submitted by shahmeer_amir 
CSRF exists in your detectify password change

30 May 2014
wont-fix

Mail.Ru disclosed a bug submitted by vahagn 
SQL injection update.mail.ru

30 May 2014

Factlink disclosed a bug submitted by pranav_hivarekar 
X/Csrf token problem

30 May 2014

Slack disclosed a bug submitted by prakharprasad 
Slack OAuth2 "redirect_uri" Bypass

29 May 2014

Coinbase disclosed a bug submitted by anshuman_bh 
Multiple Issues related to registering applications

29 May 2014

1 ... 283 284 285 286 287 ... 299

BY DENIS WERNER - @NOBBD - IMPRESSUM