Top10 publishers:

bobrov	107
linkks	60
sp1d3rs	56
jobert	46
guido	41
bl4de	39
bigbear_	38
isox	36
geeknik	35
4lemon	35

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

ZEIT disclosed a bug submitted by morax 
Access control bypass leads to domain information disclosure

04 Jul 2019

GitLab disclosed a bug submitted by yashrs 
Attacker is able to access commit title and team member comments which are supposed to be private

03 Jul 2019

Twitter disclosed a bug submitted by protostar0 
cookie injection allow dos attack to periscope.tv

03 Jul 2019

Trint Ltd disclosed a bug submitted by toannc123 
IDOR to update folder name of other user

03 Jul 2019

Zomato disclosed a bug submitted by madguyyy 
Self-Stored XSS - Chained with login/logout CSRF

03 Jul 2019

Monero disclosed a bug submitted by anonimal 
CryptoNote: remote node DoS

03 Jul 2019

Monero disclosed a bug submitted by talko 
Excessive Resource Usage

03 Jul 2019

Monero disclosed a bug submitted by cutcoin 
Vulnerability that allows an attacker to convince monero-wallet-cli that it received arbitrary amount of monero

03 Jul 2019

Monero disclosed a bug submitted by guido 
(remote) exabyte allocation via load_from_binary() (DoS)

03 Jul 2019

Monero disclosed a bug submitted by omerta 
Remote P2P DoS

03 Jul 2019

Monero disclosed a bug submitted by omerta 
Remote Daemon RPC Attack

03 Jul 2019

Monero disclosed a bug submitted by guido 
Computing hash of crafted block leads to crash in tree_hash()

03 Jul 2019

Monero disclosed a bug submitted by guido 
Monero can leak unitialized memory

02 Jul 2019

New Relic disclosed a bug submitted by ajxchapman 
Blind SSRF in Ticketing Integrations Jira webhooks leading to internal network enumeration and blind HTTP requests

02 Jul 2019

ZEIT disclosed a bug submitted by elcaesar 
Open redirection in https://zeit.co/login?next=

02 Jul 2019

Weblate disclosed a bug submitted by lgian 
Stored XSS @ /engage/<project_slug>

02 Jul 2019

U.S. Dept Of Defense disclosed a bug submitted by erbbysam 
RCE on ????? via CVE-2017-10271

01 Jul 2019

ownCloud disclosed a bug submitted by q3rv0 
Remote Code Execution through Deserialization Attack in OwnBackup app.

01 Jul 2019

Nextcloud disclosed a bug submitted by enz0 
Click Jacking Nextcloud

01 Jul 2019

Nextcloud disclosed a bug submitted by abay 
Wordpress Users Disclosure

01 Jul 2019

1 2 3 4 5 6 ... 350

BY DENIS WERNER - @NOBBD - IMPRESSUM