Top10 publishers:

bobrov	107
sp1d3rs	54
jobert	44
bl4de	39
bigbear_	38
guido	37
isox	36
geeknik	35
4lemon	35
edio	34

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Twitter disclosed a bug submitted by sehacure 
Cross site scripting on ads.twitter.com

16 Oct 2014

HackerOne disclosed a bug submitted by prakharprasad 
Ability to see common response titles of other teams (limited)

15 Oct 2014

GlassWire disclosed a bug submitted by bigbear 
Clickjacking: X-Frame-Options header missing

12 Oct 2014

Square disclosed a bug submitted by avlidienbrunn 
Reflected XSS in connect.square.com

11 Oct 2014

WePay disclosed a bug submitted by shahmeer_amir 
Session fixation in wepay.com

10 Oct 2014

Greenhouse.io disclosed a bug submitted by simon90 
openssh-server Forced Command Handling Information Disclosure Vulnerability on blog.greenhouse.io

10 Oct 2014

HackerOne disclosed a bug submitted by mrrm 
homograph attack. IDNs displyed in unicode in bug reports and on external link warning page.

09 Oct 2014

IRCCloud disclosed a bug submitted by mohdhaji87 
Bruteforce protection not enabled on the login page https://www.irccloud.com/

08 Oct 2014
wont-fix

Flash disclosed a bug submitted by hhj4ck 
Adobe Flash Player FileReference Use-after-Free Vulnerability

07 Oct 2014

Flash disclosed a bug submitted by kinine 
Flash Local Sandbox Bypass

07 Oct 2014

Twitter disclosed a bug submitted by simon90 
Twitter Flight SSL 2.0 deprecated protocol vulnerability.

07 Oct 2014

Square disclosed a bug submitted by cliffordtrigo 
Open Redirect [FreshBook]

04 Oct 2014

Python disclosed a bug submitted by pakt 
Misc Python bugs (Memory Corruption & Use After Free)

04 Oct 2014

HackerOne disclosed a bug submitted by dawidczagan 
Enumeration of users

03 Oct 2014
wont-fix

Slack disclosed a bug submitted by shahmeer_amir 
HTTP Strict Transport Policy not enabled on newly made accounts

03 Oct 2014

Mail.Ru disclosed a bug submitted by quistertow 
Flash XSS in http://lingvo.mail.ru

02 Oct 2014

Square disclosed a bug submitted by avlidienbrunn 
Blind SQL injection in www.bookfresh.com

02 Oct 2014

Twitter disclosed a bug submitted by karthik29 
HTML form without CSRF protection at http://try.crashlytics.com/enterprise/

02 Oct 2014

Phabricator disclosed a bug submitted by shahmeer_amir 
Password Policy issue

02 Oct 2014
wont-fix

IRCCloud disclosed a bug submitted by mantis 
Persistent Cross Site Scripting within the IRCCloud Pastebin

01 Oct 2014

1 ... 301 302 303 304 305 ... 333

BY DENIS WERNER - @NOBBD - IMPRESSUM