Top10 publishers:

bobrov	107
linkks	60
sp1d3rs	56
jobert	46
guido	41
bl4de	39
bigbear_	38
isox	36
geeknik	35
4lemon	35

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

ownCloud disclosed a bug submitted by testalways 
owncloud.com: WP Super Cache plugin is outdated

30 Oct 2015

Keybase disclosed a bug submitted by geeknik 
xss

30 Oct 2015

withinsecurity disclosed a bug submitted by anshuman_bh 
DDOS using xmlrpc.php

29 Oct 2015

withinsecurity disclosed a bug submitted by protector_47_two 
Uses unsafe-inline without nonce

28 Oct 2015

Yahoo! disclosed a bug submitted by panchocosil 
HTML Injection on flickr screename using IOS App

27 Oct 2015

Mail.Ru disclosed a bug submitted by hiddeneyes_pratikpanchal 
Vulnerability :- "XSS vulnerability"

24 Oct 2015

Shopify disclosed a bug submitted by brakhane 
Some S3 Buckets are world readable (and one is world writeable)

24 Oct 2015

InVision disclosed a bug submitted by deepak_das 
Enumeration and Guessable Email (OWASP-AT-002)T hrough Login Form

23 Oct 2015

Shopify disclosed a bug submitted by juhhga 
Unauthenticated access to details of hidden products in any shop via title emuneration

23 Oct 2015

InVision disclosed a bug submitted by protector_47 
CSRF Token in cookies!

22 Oct 2015

Snapchat disclosed a bug submitted by protector_47 
Vulnerable to JavaScript injection. (WXS) (Javascript injection)!

22 Oct 2015

Shopify disclosed a bug submitted by dvl 
Paid account can review\download any invoice of any other shop

22 Oct 2015

Mail.Ru disclosed a bug submitted by bigbear_ 
[start.icq.com] Reflected XSS via Cookies

21 Oct 2015

Mail.Ru disclosed a bug submitted by bigbear_ 
[riot.mail.ru] Reflected XSS in debug-mode

21 Oct 2015

Shopify disclosed a bug submitted by reactors08 
www.shopify.com XSS on blog pages via sharing buttons

21 Oct 2015

HackerOne disclosed a bug submitted by rohan_x3 
Content spoofing on invitations page

21 Oct 2015

HackerOne disclosed a bug submitted by pranav_hivarekar 
Privileged information of a private/sandboxed program is leaked in json response to an unauthorized user

21 Oct 2015

Shopify disclosed a bug submitted by pouya 
Unauthorized access to all collections, products, pages from other stores

20 Oct 2015

Shopify disclosed a bug submitted by brakhane 
Arbitrary read on s3://shopify-delivery-app-storage/files

20 Oct 2015

Zopim disclosed a bug submitted by mdv 
Cross-site Scripting in all Zopim

20 Oct 2015

1 ... 283 284 285 286 287 ... 350

BY DENIS WERNER - @NOBBD - IMPRESSUM