Top10 publishers:

bobrov	107
sp1d3rs	54
bigbear_	38
guido	37
bl4de	37
jobert	36
isox	36
4lemon	35
geeknik	35
edio	34

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

IRCCloud disclosed a bug submitted by nikbugbounty 
iOS application does not destroy session upon logout.

22 May 2014

CloudFlare disclosed a bug submitted by dekeeu 
XSS - http://js.cloudflare.com

22 May 2014
wont-fix

respondly disclosed a bug submitted by dhaval 
No Bruteforce Protection

22 May 2014

CloudFlare disclosed a bug submitted by smilez_hapiez 
Cookie missing the Secure flag

22 May 2014
wont-fix

Mail.Ru disclosed a bug submitted by atom 
Unproper usage of Mobile Number that will lead to Information Disclosure

22 May 2014
wont-fix

Slack disclosed a bug submitted by prakharprasad 
Stored XSS in Channel Chat

21 May 2014

Slack disclosed a bug submitted by prakharprasad 
Open Redirect in Slack

21 May 2014
wont-fix

Slack disclosed a bug submitted by prakharprasad 
Duplicate of #4550

21 May 2014

Automattic disclosed a bug submitted by smilez_hapiez 
Session Cookie without Secure flag set

21 May 2014
wont-fix

Automattic disclosed a bug submitted by smilez_hapiez 
Session Cookie without Secure flag set

21 May 2014
wont-fix

respondly disclosed a bug submitted by karthic 
X-Content-Type-Options header missing

21 May 2014

Localize disclosed a bug submitted by ajaysinghnegi 
Projects Watch or Notifications Settings Change Via CSRF

21 May 2014

CloudFlare disclosed a bug submitted by shahmeer_amir 
Apache Multiviews are enabled

21 May 2014
wont-fix

Faceless disclosed a bug submitted by trotmaster 
Account hijacking possible through ADB backup feature

21 May 2014

IRCCloud disclosed a bug submitted by nikbugbounty 
Login CSRF can be bypassed (Similar approach to previous one).

20 May 2014

HackerOne disclosed a bug submitted by niks 
harvesting attack on user registration

19 May 2014
wont-fix

RelateIQ disclosed a bug submitted by niks 
open redirect

19 May 2014
wont-fix

Slack disclosed a bug submitted by niks 
Reflected Xss

19 May 2014

C2FO disclosed a bug submitted by internetwache 
User guessing/enumeration at https://app.c2fo.com/api/password-reset

19 May 2014

Localize disclosed a bug submitted by vhssunny1 
Server header - information disclosure

19 May 2014

1 ... 301 302 303 304 305 ... 316

BY DENIS WERNER - @NOBBD - IMPRESSUM