Top10 publishers:

bobrov	107
sp1d3rs	54
jobert	44
bl4de	39
bigbear_	38
guido	37
isox	36
geeknik	35
4lemon	35
edio	34

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

IRCCloud disclosed a bug submitted by mantis 
Unvalidated Channel names causes IRC Command Injection

01 Oct 2014

The Internet disclosed a bug submitted by someone 
GNU Bourne-Again Shell (Bash) 'Shellshock' Vulnerability

01 Oct 2014

ExpressionEngine disclosed a bug submitted by charan 
Cross Site Scripting (Stored)

30 Sep 2014

Twitter disclosed a bug submitted by secgeek 
Delete Credit Cards from any Twitter Account in ads.twitter.com [New Vulnerability]

30 Sep 2014

Uzbey LLC disclosed a bug submitted by shahriyar 
Mass invitation send

29 Sep 2014
wont-fix

CloudFlare disclosed a bug submitted by sergeybelove 
User's data leak

28 Sep 2014

Mail.Ru disclosed a bug submitted by bigbear 
????????? ????? ??????? ?? ???? ??????????????? ??????? ? ???????? /home/berserk-online.com/public_html/forum/Themes/berserker/Profile.template.php

27 Sep 2014

Twitter disclosed a bug submitted by secanaly 
Stored xss

27 Sep 2014

HackerOne disclosed a bug submitted by christypriory 
Password Reset Bug

25 Sep 2014

Coinbase disclosed a bug submitted by michiel 
Bypassing 2FA for BTC transfers

25 Sep 2014

HackerOne disclosed a bug submitted by anand_m 
Change Any username and profile link in hackerone

25 Sep 2014

C2FO disclosed a bug submitted by faisalahmed 
All Active user sessions should be destroyed when user change his password!

23 Sep 2014

Twitter disclosed a bug submitted by vineet 
Captcha bypass with extension at http://www.mopub.com/about/contact/

22 Sep 2014
wont-fix

Square disclosed a bug submitted by pranav_hivarekar 
CSRF login

21 Sep 2014
wont-fix

concrete5 disclosed a bug submitted by robin 
broken authentication

21 Sep 2014

Phabricator disclosed a bug submitted by shahmeer_amir 
Content Spoofing through URL

20 Sep 2014
wont-fix

Mail.Ru disclosed a bug submitted by vineet 
(m.mail.ru) Password type input with auto-complete enabled

19 Sep 2014
wont-fix

Mavenlink disclosed a bug submitted by vineet 
Clickjacking & CSRF attack can be done at https://app.mavenlink.com/login

19 Sep 2014

Mavenlink disclosed a bug submitted by vineet 
Clickjacking at https://www.mavenlink.com/ main website

19 Sep 2014

Detectify disclosed a bug submitted by mohdhaji87 
Password reset link not validated.

19 Sep 2014

1 ... 302 303 304 305 306 ... 333

BY DENIS WERNER - @NOBBD - IMPRESSUM