Top10 publishers:

bobrov	109
linkks	64
sp1d3rs	56
jobert	48
guido	42
bl4de	39
bigbear_	38
isox	36
geeknik	35
4lemon	35

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

GitLab disclosed a bug submitted by jobert 
GitLab's GitHub integration is vulnerable to SSRF vulnerability

30 Aug 2019

Imgur disclosed a bug submitted by hogarth45 
CSRF leads to a stored self xss

30 Aug 2019

New Relic disclosed a bug submitted by albinowax 
Password theft login.newrelic.com via Request Smuggling

30 Aug 2019

Nextcloud disclosed a bug submitted by jelle293 
Missing DNSSEC

29 Aug 2019

Nextcloud disclosed a bug submitted by freddyb 
Reflected XSS / Markup Injection in `index.php/svg/core/logo/logo` parameter `color`

29 Aug 2019

Phabricator disclosed a bug submitted by ranjit_p 
IDOR bug to See hidden slowvote of any user even when you dont have access right

29 Aug 2019

WordPress disclosed a bug submitted by ashketchum 
Parameter tampering : Price Manipulation of Products

29 Aug 2019

Ruby disclosed a bug submitted by kyoshida 
OS Command Injection via egrep in Rake::FileList

29 Aug 2019

Shipt disclosed a bug submitted by streaak 
Slack token leaking in stackoverflow and devtimes

29 Aug 2019

Kaspersky disclosed a bug submitted by palant 
Certificate warnings and similar UI elements are susceptible to clickjacking

28 Aug 2019

Kaspersky disclosed a bug submitted by palant 
Opening up a Universal XSS vulnerability in Microsoft Edge

28 Aug 2019

GitLab disclosed a bug submitted by uzsunny 
Access Projects And create projects in gitlab pre production server

28 Aug 2019

Starbucks disclosed a bug submitted by parzel 
Subdomain takeover of datacafe-cert.starbucks.com

28 Aug 2019

WordPress disclosed a bug submitted by foobar7 
Reflected XSS: Taxonomy Converter via tax parameter

28 Aug 2019

Kartpay disclosed a bug submitted by ayushoberoi 
URl redirection

28 Aug 2019

Kartpay disclosed a bug submitted by lollol1 
Option method enabled in kartpay Webservers

28 Aug 2019

Kartpay disclosed a bug submitted by amolcg 
Application Error disclosure, Verification token seen error and user able to change password

28 Aug 2019

Kartpay disclosed a bug submitted by iheb_hamad1 
SMTP Failure Leads to Chain of Internal System Failure

28 Aug 2019

Kartpay disclosed a bug submitted by todaytoday 
Reflected XSS on https://merchant.kartpay.com/payment_settings [status]

28 Aug 2019

Kartpay disclosed a bug submitted by c00lbugs 
XSS in https://merchant.kartpay.com/settlements

28 Aug 2019

1 2 3 4 5 6 ... 361

BY DENIS WERNER - @NOBBD - IMPRESSUM