Top10 publishers:

bobrov	107
sp1d3rs	54
bigbear_	38
guido	37
bl4de	37
jobert	36
isox	36
4lemon	35
geeknik	35
edio	34

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Envoy disclosed a bug submitted by tdthechamp 
Authentication Bypass

14 Aug 2014
wont-fix

Factlink disclosed a bug submitted by shahmeer_amir 
Click-Jacking due to missing X-frame header

13 Aug 2014
wont-fix

Phabricator disclosed a bug submitted by tunnelshade 
XSS in editor by any user

13 Aug 2014

Slack disclosed a bug submitted by cliffordtrigo 
Content Spoofing

11 Aug 2014
wont-fix

Automattic disclosed a bug submitted by jeroldcamacho 
xss in simperium.com

10 Aug 2014

Automattic disclosed a bug submitted by niks 
privilege escalation

10 Aug 2014

Localize disclosed a bug submitted by jeroldcamacho 
missing sender policy framework (SPF)

09 Aug 2014

Envoy disclosed a bug submitted by shahmeer_amir 
Too much sensitive information in GET https://signwithenvoy.com/device_config/preview_badge

09 Aug 2014
wont-fix

CloudFlare disclosed a bug submitted by smiegles 
jplayer.swf Cross-site scripting

08 Aug 2014

CloudFlare disclosed a bug submitted by smiegles 
http://cdnjs.cloudflare.com/ Cross-site scripting 2

08 Aug 2014

StopTheHacker disclosed a bug submitted by dekeeu 
XSS Reflected - https://www.stopthehacker.com/

08 Aug 2014

Coin.co disclosed a bug submitted by blackb0xl33t 
Information disclosure : Web Server Version Details

08 Aug 2014

Yahoo! disclosed a bug submitted by michelgaschet 
Default /docs folder of PHPBB3 installation on gamesnet.yahoo.com

08 Aug 2014

RelateIQ disclosed a bug submitted by quistertow 
Cross Site Scripting (XSS) - app.relateiq.com

07 Aug 2014

Slack disclosed a bug submitted by prakharprasad 
Stored XSS in username.slack.com

07 Aug 2014

Mail.Ru disclosed a bug submitted by quistertow 
rs.mail.ru - Flash Based XSS

07 Aug 2014

Khan Academy disclosed a bug submitted by bigbear 
CRLF Injection

07 Aug 2014
wont-fix

Khan Academy disclosed a bug submitted by bigbear 
Unchecking hidden parameter is vulnerable to XSS-attack

07 Aug 2014
wont-fix

Mail.Ru disclosed a bug submitted by quistertow 
Flash XSS in http://go.mail.ru

07 Aug 2014

FanFootage disclosed a bug submitted by shahmeer_amir 
Cookie fixation

07 Aug 2014

1 ... 290 291 292 293 294 ... 316

BY DENIS WERNER - @NOBBD - IMPRESSUM