Top10 publishers:

bobrov	114
linkks	74
geeknik	71
sp1d3rs	62
jobert	54
guido	45
bl4de	42
ryat	40
bigbear_	38
zombiehelp54	37

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Snapchat disclosed a bug submitted by ebrietas 
Subdomain takeover on http://fastly.sc-cdn.net/

22 Aug 2016

Twitter disclosed a bug submitted by vijay_kumar1110 
Add tweet to collection CSRF

22 Aug 2016

Twitter disclosed a bug submitted by vijay_kumar1110 
Urgent : Disclosure of all the apps with hash ID in mopub through API request (Authentication bypass)

22 Aug 2016

GitLab disclosed a bug submitted by plazmaz 
XSS On meta tags in profile page

21 Aug 2016

Gratipay disclosed a bug submitted by a5tronaut 
fix bug in username restriction

20 Aug 2016

Uber disclosed a bug submitted by raghav_bisht 
XSS At "pages.et.uber.com"

19 Aug 2016

HackerOne disclosed a bug submitted by heracles 
Non-secure requests are not automatically upgraded to HTTPS

19 Aug 2016

concrete5 disclosed a bug submitted by paulos_ 
Local File Inclusion path bypass

19 Aug 2016

Ian Dunn disclosed a bug submitted by thezawad 
Multiple XSS in Camptix Event Ticketing Plugin

18 Aug 2016

Ian Dunn disclosed a bug submitted by thezawad 
CSV Injection at Camptix Event Ticketing

18 Aug 2016

HackerOne disclosed a bug submitted by faisalahmed 
Information leakage of private program

18 Aug 2016

GoCD disclosed a bug submitted by mr__robot 
X-Content-Type-Options header missing at Auth Login

18 Aug 2016

Coursera disclosed a bug submitted by muhammadkhizerjaved 
Broken authentication and session management flaw

18 Aug 2016

ExpressionEngine disclosed a bug submitted by strukt 
Arbitrary SQL query execution and reflected XSS in the "SQL Query Form"

18 Aug 2016

Ian Dunn disclosed a bug submitted by dia2diab 
XSS in Tagregator plugin

18 Aug 2016

Ian Dunn disclosed a bug submitted by jamalcom 
Path Disclosure Vulnerability

18 Aug 2016

Ian Dunn disclosed a bug submitted by proxynwh 
SSL certificate public key less than 2048 bit

18 Aug 2016

Ian Dunn disclosed a bug submitted by proxynwh 
Brute force on wp-login

18 Aug 2016

HackerOne disclosed a bug submitted by troubleshooter 
Requesting Mediation possible on reports that are too old for mediation

17 Aug 2016

Slack disclosed a bug submitted by nhavis 
CSRF - Add optional two factor mobile number

17 Aug 2016

1 ... 301 302 303 304 305 ... 419

BY DENIS WERNER - @NOBBD - IMPRESSUM