Top10 publishers:

bobrov	114
linkks	73
geeknik	70
sp1d3rs	62
jobert	51
guido	45
bl4de	42
ryat	40
bigbear_	38
zombiehelp54	37

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Paragon Initiative Enterprises disclosed a bug submitted by ahmedkhouja 
Email Authentication Bypass

16 May 2016

Uber disclosed a bug submitted by jouko 
Stored XSS in drive.uber.com WordPress admin panel

14 May 2016

LocalTapiola disclosed a bug submitted by billy_blaze 
Posting modified information in 'Investment section' will cause unintended information change in verkkopalvelu.tapiola.fi

14 May 2016

Veris disclosed a bug submitted by sasi2103 
Password(s) can be found via login process.

13 May 2016

Veris disclosed a bug submitted by yaworsk 
Complete or Edit Another User's Profile

13 May 2016

Gratipay disclosed a bug submitted by trabajoduro 
Vulnerable to clickjacking

13 May 2016

Veris disclosed a bug submitted by bugs3ra 
Captcha Bypass enable login bruteforce

13 May 2016

Veris disclosed a bug submitted by eboda 
Stored XSS in member book

13 May 2016

Veris disclosed a bug submitted by ashish_goanhacker 
XSS in Asset name

13 May 2016

New Relic disclosed a bug submitted by ahsantahirat 
New Relic - Session Hijacking

13 May 2016

Veris disclosed a bug submitted by zuh4n 
Stored XSS on 'Badges' page

13 May 2016

Gratipay disclosed a bug submitted by fallen 
don't expose path of Python

13 May 2016

Uber disclosed a bug submitted by rohk 
Drivers can change profile picture

12 May 2016

Mail.Ru disclosed a bug submitted by cyberpunkych 
Reflected XSS ?? games.mail.ru

12 May 2016

APITest.IO disclosed a bug submitted by mogli 
Clickjacking: X-Frame-Options header missing

12 May 2016

LocalTapiola disclosed a bug submitted by konqi 
Source Code Disclosure on out of scope domain viestinta.lahitapiola.fi

12 May 2016

LocalTapiola disclosed a bug submitted by maxy 
Amazon Bucket Accessible (http://inpref.s3.amazonaws.com/)

12 May 2016

HackerOne disclosed a bug submitted by apok 
Inadequate access controls in "Vote" functionality???

12 May 2016

Uber disclosed a bug submitted by rohk 
Mass Assignment Vulnerability in partners.uber.com

09 May 2016

Algolia disclosed a bug submitted by djamel-ghorab 
text injection can be used in phishing 404 page should not include attacker text

09 May 2016

1 ... 299 300 301 302 303 ... 391

BY DENIS WERNER - @NOBBD - IMPRESSUM