Top10 publishers:

bobrov	114
linkks	75
geeknik	72
sp1d3rs	63
jobert	57
netfuzzer	47
guido	45
bl4de	42
ryat	40
bigbear_	38

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

InVision disclosed a bug submitted by gr4ys 
Content Spoofing - Signout Warning Page

18 Dec 2016

shopify-scripts disclosed a bug submitted by haquaman 
Invalid memory write caused by incorrect upper bound in array_copy

18 Dec 2016

shopify-scripts disclosed a bug submitted by haquaman 
Buffer overflow in mrb_time_asctime

18 Dec 2016

shopify-scripts disclosed a bug submitted by haquaman 
Read after free in mrb_vm_exec with OP_ARYCAT reading R(B)

18 Dec 2016

shopify-scripts disclosed a bug submitted by dkasak 
Segfault when passing invalid values to `values_at`

17 Dec 2016

shopify-scripts disclosed a bug submitted by haquaman 
Null pointer dereference in ary_concat

17 Dec 2016

shopify-scripts disclosed a bug submitted by haquaman 
Invalid memory access while freeing memory, caused by invalid type passed to mrb_ary_unshift

17 Dec 2016

shopify-scripts disclosed a bug submitted by haquaman 
Null pointer dereference in mrb_str_concat

17 Dec 2016

shopify-scripts disclosed a bug submitted by haquaman 
Null pointer dereference due to bug in codegen with negation of floats

17 Dec 2016

shopify-scripts disclosed a bug submitted by haquaman 
Segmentation fault due to invalid memory access in codegen when using break with the 127th argument a constant

17 Dec 2016

shopify-scripts disclosed a bug submitted by haquaman 
Denial of Service in mruby due to null pointer dereference

17 Dec 2016

shopify-scripts disclosed a bug submitted by haquaman 
Null pointer dereference regression in parse.y

17 Dec 2016

shopify-scripts disclosed a bug submitted by haquaman 
Null pointer derefence due to bug in codegen with negation without using value

17 Dec 2016

shopify-scripts disclosed a bug submitted by haquaman 
Segmentation fault due to bad memory access in kh_get_mt

17 Dec 2016

shopify-scripts disclosed a bug submitted by haquaman 
Denial of service due to invalid memory access in mrb_ary_concat

17 Dec 2016

Shopify disclosed a bug submitted by prem1807 
XSS on manually entering Postal codes

17 Dec 2016

Shopify disclosed a bug submitted by dhaval 
Misconfiguration in Two Factor Authorisation

17 Dec 2016

shopify-scripts disclosed a bug submitted by jpenalbae 
NULL pointer dereference when parsing ternary operators

17 Dec 2016

shopify-scripts disclosed a bug submitted by jpenalbae 
SIGSEGV when invalid argument on remove_method

17 Dec 2016

shopify-scripts disclosed a bug submitted by jpenalbae 
SIGSEV on mrb_ary_splice

17 Dec 2016

1 ... 302 303 304 305 306 ... 448

BY DENIS WERNER - @NOBBD - IMPRESSUM