Top10 publishers:

bobrov	114
linkks	74
geeknik	71
sp1d3rs	62
jobert	54
guido	45
bl4de	42
ryat	40
bigbear_	38
zombiehelp54	37

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

SecNews disclosed a bug submitted by sameoldstory 
Querying private posts and changing post meta

09 Aug 2016

Shopify disclosed a bug submitted by vijay_kumar1110 
Delete/modify your own comment after limited access(IDOR)

09 Aug 2016

Shopify disclosed a bug submitted by vijay_kumar1110 
Staff member can delete Private Apps

09 Aug 2016

SecNews disclosed a bug submitted by marine 
Text injection on error page.

09 Aug 2016

Shopify disclosed a bug submitted by mico02 
Unauthorized access to Zookeeper on http://locutus-zk3.ec2.shopify.com:2181

08 Aug 2016

Gratipay disclosed a bug submitted by akanshaminti 
Cookie:HttpOnly Flag not set

08 Aug 2016

Nextcloud disclosed a bug submitted by ctee 
Bookmarks: Delete all existing bookmarks of a user

08 Aug 2016

Mail.Ru disclosed a bug submitted by konqi 
[opensource.mail.ru] system accounts enumeration

08 Aug 2016

ExpressionEngine disclosed a bug submitted by strukt 
Filename and directory enumeration

08 Aug 2016

Uber disclosed a bug submitted by raghav_bisht 
Blind OOB XXE At "http://ubermovement.com/"

08 Aug 2016

Gratipay disclosed a bug submitted by footstep 
Host Header Injection/Redirection Attack

07 Aug 2016

Gratipay disclosed a bug submitted by ahsantahir 
Content Spoofing/Text Injection

07 Aug 2016

ExpressionEngine disclosed a bug submitted by strukt 
Full path + some back-end code disclosure

07 Aug 2016

WePay disclosed a bug submitted by eboda 
Invited users can modify and/or remove account owner

06 Aug 2016

New Relic disclosed a bug submitted by daniyal_nasir 
Vulnerable Link Leaks the User Names

05 Aug 2016

New Relic disclosed a bug submitted by smil3 
All the active session should destroy when user change his password

05 Aug 2016

New Relic disclosed a bug submitted by rahul_ch 
no email confirmation on signup

05 Aug 2016

New Relic disclosed a bug submitted by rahul_ch 
newrelic.com vulnerable to clickjacking !

05 Aug 2016

Automattic disclosed a bug submitted by jouko 
WordPress core stored XSS via attachment file name

05 Aug 2016

Ubiquiti Networks disclosed a bug submitted by 93c08539 
Read-Only user can execute arbitraty shell commands on AirOS

05 Aug 2016

1 ... 302 303 304 305 306 ... 417

BY DENIS WERNER - @NOBBD - IMPRESSUM