Top10 publishers:

bobrov	114
linkks	75
geeknik	72
sp1d3rs	63
jobert	57
netfuzzer	47
guido	45
bl4de	42
ryat	40
bigbear_	38

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

h1-ctf disclosed a bug submitted by yashrs 
[H1-2006 2020] CTF Writeup

06 Jul 2020

h1-ctf disclosed a bug submitted by shakedko 
@shakedko H1-2006 CTF writeup

06 Jul 2020

h1-ctf disclosed a bug submitted by kapytein 
[h1-2006 CTF] Multiple vulnerabilities leading to account takeover and two-factor authentication bypass allows to send pending bounty payments

06 Jul 2020

DRIVE.NET, Inc. disclosed a bug submitted by sandesh_shinde 
Testing for arbitrary HTTP methods

06 Jul 2020

Endless Hosting disclosed a bug submitted by codermak 
Enumeration of username on password reset page

05 Jul 2020

Node.js disclosed a bug submitted by coreyfarrell 
Child process environment injection via prototype pollution

04 Jul 2020

concrete5 disclosed a bug submitted by mayllart 
Remote Code Execution through Extension Bypass on Log Functionality

03 Jul 2020

concrete5 disclosed a bug submitted by solov9ev 
Stored XSS in the file search filter

03 Jul 2020

concrete5 disclosed a bug submitted by solov9ev 
Stored XSS on express entries

03 Jul 2020

Node.js disclosed a bug submitted by jzebor 
Malformed HTTP/2 SETTINGS frame leads to reachable assert

03 Jul 2020

Stripo Inc disclosed a bug submitted by what_web 
[www.stripo.email] There is no rate limit for /it/contact-us/ endpoints

03 Jul 2020

Stripo Inc disclosed a bug submitted by mraldersonn 
multiple email usage -my.stripo.email-

03 Jul 2020

8x8 disclosed a bug submitted by manantch 
PHPinfo page on http://?????.callstats.io

02 Jul 2020

Node.js disclosed a bug submitted by galgo 
Node.js HTTP/2 Large Settings Frame DoS

02 Jul 2020

Node.js disclosed a bug submitted by tniessen 
napi_get_value_string_X allow various kinds of memory corruption

02 Jul 2020

InnoGames disclosed a bug submitted by webklex 
Create any military unit in any age

02 Jul 2020

Glassdoor disclosed a bug submitted by safehacker_27 
2FA bypass by sending blank code

02 Jul 2020

pixiv disclosed a bug submitted by katsuragicsl 
CSRF at https://chatstory.pixiv.net/imported

02 Jul 2020

Helium disclosed a bug submitted by dracomalfoy 
HTTP request Smuggling

02 Jul 2020

SMTP2GO disclosed a bug submitted by tryforimpossible 
Stored XSS at https://app.smtp2go.com/settings/users/

02 Jul 2020

1 2 3 4 5 6 ... 448

BY DENIS WERNER - @NOBBD - IMPRESSUM