Top10 publishers:

bobrov	76
sp1d3rs	54
bigbear_	38
bl4de	37
guido	37
isox	36
edio	34
4lemon	34
jobert	34
geeknik	33

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Mail.Ru disclosed a bug submitted by bitquark 
Home page reflected XSS

06 Jun 2014

Coinbase disclosed a bug submitted by 0ctac0der 
CSRF in function "Set as primary" on accounts page

06 Jun 2014

4chan disclosed a bug submitted by shahmeer_amir 
Login panel brute force attack

06 Jun 2014
wont-fix

Yahoo! disclosed a bug submitted by santese 
Server Side Request Forgery

05 Jun 2014

Factlink disclosed a bug submitted by chandrakant 
Sign up CSRF

05 Jun 2014

Factlink disclosed a bug submitted by shahriar 
Password reset link doesn't expire.

05 Jun 2014

MS-DOS disclosed a bug submitted by dhaval 
Injecting Distrust and Disbelief in Addicted Gamers

04 Jun 2014

99designs disclosed a bug submitted by smilez_hapiez 
Insecure transition from HTTP to HTTPS in form post

04 Jun 2014
wont-fix

Factlink disclosed a bug submitted by bitquark 
Proxy service crash DoS

04 Jun 2014

Factlink disclosed a bug submitted by jaikeysarraf 
Anonymous Proxy and IP leak

04 Jun 2014

Automattic disclosed a bug submitted by khairalhamad 
Serving Transitions From: HTTP Protocol (not secure)

04 Jun 2014
wont-fix

RelateIQ disclosed a bug submitted by shahmeer_amir 
Wildcard DNS in website

01 Jun 2014

Slack disclosed a bug submitted by karshxz7593 
Stored XSS Found

01 Jun 2014

Slack disclosed a bug submitted by kadaba 
open redirect in https://slack.com

31 May 2014
wont-fix

InVision disclosed a bug submitted by xss 
TLS Renegotiation and Denial of Service Attacks on InVision.

30 May 2014
wont-fix

Mail.Ru disclosed a bug submitted by vinod 
Admin panel of http://tp-test1.corp.mail.ru/ is acccessible publicly

30 May 2014

Mail.Ru disclosed a bug submitted by vahagn 
SQL inj

30 May 2014

Detectify disclosed a bug submitted by shahmeer_amir 
CSRF exists in your detectify password change

30 May 2014
wont-fix

Mail.Ru disclosed a bug submitted by vahagn 
SQL injection update.mail.ru

30 May 2014

Factlink disclosed a bug submitted by pranav_hivarekar 
X/Csrf token problem

30 May 2014

1 ... 290 291 292 293 294 ... 307

BY DENIS WERNER - @NOBBD - IMPRESSUM