Top10 publishers:

bobrov	114
linkks	74
geeknik	71
sp1d3rs	62
jobert	54
guido	45
bl4de	42
ryat	40
bigbear_	38
zombiehelp54	37

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Instacart disclosed a bug submitted by cablej 
Brute force login and bypass locked account restrictions via iOS app

19 Sep 2016

Shopify disclosed a bug submitted by nismo 
XSS in SHOPIFY: Unsanitized Supplier Name can lead to XSS in Transfers Timeline

19 Sep 2016

Shopify disclosed a bug submitted by nismo 
Unsanitized Location Name in POS Channel can lead to XSS in Orders Timeline

19 Sep 2016

Shopify disclosed a bug submitted by ysx 
Access to Splunk via shard3-db2.ec2.shopify.com endpoint

19 Sep 2016

OLX disclosed a bug submitted by surajsp 
full path disclosure vulnerability at https://security.olx.com/*

19 Sep 2016

Boozt Fashion AB disclosed a bug submitted by 0x00iam_hack3r 
Http header injection

19 Sep 2016

Legal Robot disclosed a bug submitted by paramdham 
No valid SPF record

19 Sep 2016

Legal Robot disclosed a bug submitted by paramdham 
Rate limiting on Email confirmation link

19 Sep 2016

Uber disclosed a bug submitted by dups 
Attacker could setup reminder remotely using brute force

19 Sep 2016

Boozt Fashion AB disclosed a bug submitted by yassineaboukir 
Host header poisoning leads to account password reset links hijacking

17 Sep 2016

OLX disclosed a bug submitted by nayranama 
Full Account Takeover

17 Sep 2016

Instacart disclosed a bug submitted by tbmnull 
shopper login_code's can be brute forced

17 Sep 2016

Udemy disclosed a bug submitted by w3b7ricks73r 
NON VALIDATION OF SESSIONS AFTER PASSWORD CHANGE

16 Sep 2016

Mail.Ru disclosed a bug submitted by konqi 
[tidaltrek.mail.ru] SQL Injection

16 Sep 2016

Legal Robot disclosed a bug submitted by paramdham 
- Guessing registered users in legalrobot.com

16 Sep 2016

Legal Robot disclosed a bug submitted by paramdham 
Rate limiting on password reset links

16 Sep 2016

Uber disclosed a bug submitted by gopinath6 
User regisrtration money wallet link issue

16 Sep 2016

Uber disclosed a bug submitted by temmyscript 
Changing paymentProfileUuid when booking a trip allows free rides

15 Sep 2016

Instacart disclosed a bug submitted by trad_zero_h 
CSRF To change Email Notification Settings

15 Sep 2016

Instacart disclosed a bug submitted by cablej 
API OAuth Public Key disclosure in mobile app

15 Sep 2016

1 ... 291 292 293 294 295 ... 417

BY DENIS WERNER - @NOBBD - IMPRESSUM