Top10 publishers:

bobrov	114
linkks	73
geeknik	71
sp1d3rs	62
jobert	52
guido	45
bl4de	42
ryat	40
bigbear_	38
zombiehelp54	37

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Coinbase disclosed a bug submitted by ahsantahirat 
No authorization required in iOS device web-application

30 Jun 2016

Coinbase disclosed a bug submitted by ahsantahirat 
No authorization required in Windows phone web-application

30 Jun 2016

Ruby disclosed a bug submitted by jeremy 
SMTP command injection

30 Jun 2016

Pornhub disclosed a bug submitted by zephrfish 
Reflected XSS by way of jQuery function

28 Jun 2016

Ian Dunn disclosed a bug submitted by whitehatter 
Stored XSS in SupportFlow Ticket Subject

28 Jun 2016

Ian Dunn disclosed a bug submitted by whitehatter 
Stored XSS from ticket messages in admin table in SupportFlow

28 Jun 2016

Trello disclosed a bug submitted by fiseha_- 
Report bug on jetpack plugin

28 Jun 2016

Pornhub disclosed a bug submitted by zephrfish 
Same-Origin Method Execution bug in plupload.flash.swf on /insights

28 Jun 2016

Zomato disclosed a bug submitted by amirisme 
Stored Cross site scripting

28 Jun 2016

LocalTapiola disclosed a bug submitted by fransrosen 
Persistent XSS at verkkopalvelu.tapiola.fi using spoofed React element and React v.0.13.3

27 Jun 2016

bitaccess disclosed a bug submitted by cablej 
EXTREMELY URGENT: Missing control of bitcoin amount when selling bitcoin allows a user to withdraw any amount of money, unrestricted.

27 Jun 2016

Bime disclosed a bug submitted by anish2good 
Bime Unable to load Data Sources

27 Jun 2016

Informatica disclosed a bug submitted by albinowax 
[marketplace.informatica.com] Open Redirect

27 Jun 2016

Uber disclosed a bug submitted by albinowax 
Stored XSS in developer.uber.com

27 Jun 2016

Dropbox disclosed a bug submitted by albinowax 
Lack of account link warning enables dropbox hijacking

27 Jun 2016

WebSummit disclosed a bug submitted by anony-123 
Time Based SQL injection in url parameter

27 Jun 2016

Mail.Ru disclosed a bug submitted by whitedragon143 
BRUTE FORCE ATTACK

27 Jun 2016

Python disclosed a bug submitted by guido 
Heap corruption via Python 2.7.11 IOBase readline()

26 Jun 2016

concrete5 disclosed a bug submitted by egix 
Local File Inclusion Vulnerability in Concrete5 version 5.7.3.1

26 Jun 2016

concrete5 disclosed a bug submitted by egix 
Multiple Stored Cross Site Scripting Vulnerabilities in Concrete5 version 5.7.3.1

26 Jun 2016

1 ... 301 302 303 304 305 ... 406

BY DENIS WERNER - @NOBBD - IMPRESSUM