Top10 publishers:

bobrov	107
sp1d3rs	54
jobert	41
bigbear_	38
bl4de	37
guido	37
isox	36
4lemon	35
geeknik	35
edio	34

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Yahoo! disclosed a bug submitted by redshark1802 
Header injection on rmaitrack.ads.vip.bf1.yahoo.com

31 Jul 2014

Mavenlink disclosed a bug submitted by mikkz 
Login CSRF

31 Jul 2014

Uzbey LLC disclosed a bug submitted by faisalahmed 
All Active user sessions should be destroyed when user change his password!

30 Jul 2014

DC Compendium disclosed a bug submitted by smiegles 
Error page Cross-site scripting

30 Jul 2014

jsDelivr disclosed a bug submitted by shubham 
XSS

29 Jul 2014

jsDelivr disclosed a bug submitted by shahmeer_amir 
HSTS Policy not enabled on cdn.jsdelivr.net

29 Jul 2014
wont-fix

4chan disclosed a bug submitted by reactors08 
XSS in settings

28 Jul 2014

Slack disclosed a bug submitted by sehacure 
CSRF vulnerability on https://sehacure.slack.com/account/settings

26 Jul 2014

Coinbase disclosed a bug submitted by anshuman_bh 
CSRF on "Set as primary" option on the accounts page

26 Jul 2014

RelateIQ disclosed a bug submitted by pum 
SSRF (Portscan) via Register Function (Custom Server)

26 Jul 2014

HackerOne disclosed a bug submitted by sehacure 
Category- Broken Authentication and Session Management (leads to account compromise if some conditions are met)

26 Jul 2014

RelateIQ disclosed a bug submitted by cliffordtrigo 
TRACE disclosure attack may be possible

25 Jul 2014

WePay disclosed a bug submitted by cliffordtrigo 
CSRF & Nonce Token Weak Implementation

25 Jul 2014

The Internet disclosed a bug submitted by donb 
LZ4 Core

25 Jul 2014

Mavenlink disclosed a bug submitted by panchocosil 
Flash XSS on swfupload.swf showing at app.mavenlink.com

24 Jul 2014

Uzbey LLC disclosed a bug submitted by karthic 
Language version disclosure in response header

23 Jul 2014

Uzbey LLC disclosed a bug submitted by anonymous_india 
Breach Attack Vulnerability

23 Jul 2014
wont-fix

Uzbey LLC disclosed a bug submitted by anonymous_india 
HTML Form Without CSRF Protection Vulnerability

23 Jul 2014
wont-fix

Uzbey LLC disclosed a bug submitted by prakharprasad 
Flash Content-Type Sniffing Vulnerability

23 Jul 2014

Uzbey LLC disclosed a bug submitted by jimeno 
IFXSS (image filename XSS) by creating a new Photo Gallery

23 Jul 2014

1 ... 304 305 306 307 308 ... 327

BY DENIS WERNER - @NOBBD - IMPRESSUM