Top10 publishers:

bobrov	107
sp1d3rs	54
jobert	41
bigbear_	38
bl4de	37
guido	37
isox	36
4lemon	35
geeknik	35
edio	34

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

HackerOne disclosed a bug submitted by djamel 
Email changing

28 Aug 2014
wont-fix

Automattic disclosed a bug submitted by mohaab007 
Missing HSTS header in https://public-api.wordpress.com

28 Aug 2014
wont-fix

DC Compendium disclosed a bug submitted by adrianbelen 
source code disclosure

27 Aug 2014

Envoy disclosed a bug submitted by sasi2103 
Delete visitor from IPAD with fullname which contains JS results XSS

27 Aug 2014

Coinbase disclosed a bug submitted by 0ctac0der 
Simultaneous Session Logon : Improper Session Management

26 Aug 2014
wont-fix

RelateIQ disclosed a bug submitted by pum 
Failed Certificate Validation On Custom Server (Register)

25 Aug 2014

Coinbase disclosed a bug submitted by bbohn 
2FA settings allowed to be changed with no delay/freeze on funds

25 Aug 2014
wont-fix

Slack disclosed a bug submitted by asdjsonyou 
Open Redirect login account

25 Aug 2014

Slack disclosed a bug submitted by asdjsonyou 
Content spoofing at Stripe Integrations

25 Aug 2014

WePay disclosed a bug submitted by pranav_hivarekar 
Typical form vulnerable to csrf attack

23 Aug 2014

HackerOne disclosed a bug submitted by xtross 
Account Hijacking (Only rare case scenario)

23 Aug 2014
wont-fix

OkCupid disclosed a bug submitted by kenb 
XSS in 404 page of cdn.okccdn.com

22 Aug 2014

Uzbey LLC disclosed a bug submitted by darkh4x 
Missing "size check" on files to upload could make memory leaks.

22 Aug 2014

Slack disclosed a bug submitted by cliffordtrigo 
Deleting Teams implemenation

21 Aug 2014
wont-fix

WePay disclosed a bug submitted by mrrm 
oauth redirect uri validation bug leads to open redirect and account compromise

21 Aug 2014
wont-fix

Mavenlink disclosed a bug submitted by cliffordtrigo 
Clickjacking

21 Aug 2014

Yahoo! disclosed a bug submitted by kenb 
XSS on Every sports.yahoo.com page

20 Aug 2014

Yahoo! disclosed a bug submitted by surgent10cross 
Comment Spoofing at http://suggestions.yahoo.com/detail/?prop=directory&fid=97721

20 Aug 2014

Yahoo! disclosed a bug submitted by surgent10cross 
CSRF Token missing on http://baseball.fantasysports.yahoo.com/b1/127146/messages

20 Aug 2014

Yahoo! disclosed a bug submitted by surgent10cross 
CSRF Token is missing on DELETE message option on http://baseball.fantasysports.yahoo.com/b1/127146/messages

20 Aug 2014

1 ... 299 300 301 302 303 ... 327

BY DENIS WERNER - @NOBBD - IMPRESSUM