Top10 publishers:

bobrov	107
sp1d3rs	54
jobert	45
bl4de	39
bigbear_	38
guido	38
isox	36
4lemon	35
linkks	35
geeknik	35

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

HackerOne disclosed a bug submitted by danlec 
CSP Bypass: Click handler for links with data-method="post" can cause authenticity_token to be sent off domain

26 Feb 2015

Todoist disclosed a bug submitted by cliffordtrigo 
Taking over a Business Account Admin

26 Feb 2015

Todoist disclosed a bug submitted by cliffordtrigo 
Remotely removing credit cards from business accounts!

26 Feb 2015

Twitter disclosed a bug submitted by config 
User's DM won't deleted after logout from Twitter for iOS (com.atebits.xxx.application-state)

25 Feb 2015

Twitter disclosed a bug submitted by homakov 
Redirect URL in /intent/ functionality is not properly escaped

24 Feb 2015

Square disclosed a bug submitted by mikkz 
XSS on bookfresh

23 Feb 2015

Square disclosed a bug submitted by avicoder 
HTTP Header revealing server information.

23 Feb 2015
wont-fix

Vimeo disclosed a bug submitted by batram 
XSS on any site that includes the moogaloop flash player | deprecated embed code

22 Feb 2015

Twitter disclosed a bug submitted by simon90 
URGENT - SUBDOMAIN TAKEOVER ON TWITTER ACQ.

21 Feb 2015

OkCupid disclosed a bug submitted by bitquark 
Rosetta flash vulnerability in clientstats AJAX script

20 Feb 2015

Twitter disclosed a bug submitted by avicoder 
Path disclosure in platform0.twitter.com

20 Feb 2015
wont-fix

HackerOne disclosed a bug submitted by anshuman_bh 
Insecure Direct Object Reference vulnerability

20 Feb 2015

Square disclosed a bug submitted by niyaax 
Redirect while opening link in new tabs

19 Feb 2015

Twitter disclosed a bug submitted by wesecureapp 
HTML/XSS rendered in Android App of Crashlytics through fabric.io

18 Feb 2015

Twitter disclosed a bug submitted by wesecureapp 
Flaw in login with twitter to steal Oauth tokens

18 Feb 2015

Localize disclosed a bug submitted by testalways 
PHP reveals potentially sensitive information via certain HTTP requests that contain specific QUERY strings.

17 Feb 2015

Localize disclosed a bug submitted by pulkit_pandey 
files likes of README.md is public

17 Feb 2015

Vimeo disclosed a bug submitted by harshafriend4all 
profile photo update bypass

17 Feb 2015

itBit Exchange disclosed a bug submitted by harshafriend4all 
weird bug ! ( missing validation on new email verfication )

14 Feb 2015

Vimeo disclosed a bug submitted by harshafriend4all 
Buying ondemand videos that 0.1 and sometimes for free

13 Feb 2015

1 ... 299 300 301 302 303 ... 339

BY DENIS WERNER - @NOBBD - IMPRESSUM