Top10 publishers:

bobrov	107
sp1d3rs	54
bigbear_	38
jobert	38
guido	37
bl4de	37
isox	36
geeknik	35
4lemon	35
edio	34

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

DC Compendium disclosed a bug submitted by huzaifa_82 
Forward Secrecy is disable

01 Aug 2014
wont-fix

DC Compendium disclosed a bug submitted by shahmeer_amir 
Backend source code disclosure on 404 pages

01 Aug 2014

Secret disclosed a bug submitted by denull 
ClientId gives away platform (iOS/Android) from which a secret was posted.

01 Aug 2014

Yahoo! disclosed a bug submitted by redshark1802 
Cross-origin issue on rmaiauth.ads.vip.bf1.yahoo.com

31 Jul 2014

Yahoo! disclosed a bug submitted by redshark1802 
Header injection on rmaitrack.ads.vip.bf1.yahoo.com

31 Jul 2014

Mavenlink disclosed a bug submitted by mikkz 
Login CSRF

31 Jul 2014

Uzbey LLC disclosed a bug submitted by faisalahmed 
All Active user sessions should be destroyed when user change his password!

30 Jul 2014

DC Compendium disclosed a bug submitted by smiegles 
Error page Cross-site scripting

30 Jul 2014

jsDelivr disclosed a bug submitted by shubham 
XSS

29 Jul 2014

jsDelivr disclosed a bug submitted by shahmeer_amir 
HSTS Policy not enabled on cdn.jsdelivr.net

29 Jul 2014
wont-fix

4chan disclosed a bug submitted by reactors08 
XSS in settings

28 Jul 2014

Slack disclosed a bug submitted by sehacure 
CSRF vulnerability on https://sehacure.slack.com/account/settings

26 Jul 2014

Coinbase disclosed a bug submitted by anshuman_bh 
CSRF on "Set as primary" option on the accounts page

26 Jul 2014

RelateIQ disclosed a bug submitted by pum 
SSRF (Portscan) via Register Function (Custom Server)

26 Jul 2014

HackerOne disclosed a bug submitted by sehacure 
Category- Broken Authentication and Session Management (leads to account compromise if some conditions are met)

26 Jul 2014

RelateIQ disclosed a bug submitted by cliffordtrigo 
TRACE disclosure attack may be possible

25 Jul 2014

WePay disclosed a bug submitted by cliffordtrigo 
CSRF & Nonce Token Weak Implementation

25 Jul 2014

The Internet disclosed a bug submitted by donb 
LZ4 Core

25 Jul 2014

Mavenlink disclosed a bug submitted by panchocosil 
Flash XSS on swfupload.swf showing at app.mavenlink.com

24 Jul 2014

Uzbey LLC disclosed a bug submitted by karthic 
Language version disclosure in response header

23 Jul 2014

1 ... 301 302 303 304 305 ... 325

BY DENIS WERNER - @NOBBD - IMPRESSUM