Top10 publishers:

bobrov	107
sp1d3rs	54
jobert	45
bl4de	39
bigbear_	38
guido	38
isox	36
4lemon	35
linkks	35
geeknik	35

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Mail.Ru disclosed a bug submitted by bigbear 
????????? ????? ??????? ?? ???? ??????????????? ??????? ? ???????? /home/berserk-online.com/public_html/forum/Themes/berserker/Profile.template.php

27 Sep 2014

Twitter disclosed a bug submitted by secanaly 
Stored xss

27 Sep 2014

HackerOne disclosed a bug submitted by christypriory 
Password Reset Bug

25 Sep 2014

Coinbase disclosed a bug submitted by michiel 
Bypassing 2FA for BTC transfers

25 Sep 2014

HackerOne disclosed a bug submitted by anand_m 
Change Any username and profile link in hackerone

25 Sep 2014

C2FO disclosed a bug submitted by faisalahmed 
All Active user sessions should be destroyed when user change his password!

23 Sep 2014

Twitter disclosed a bug submitted by vineet 
Captcha bypass with extension at http://www.mopub.com/about/contact/

22 Sep 2014
wont-fix

Square disclosed a bug submitted by pranav_hivarekar 
CSRF login

21 Sep 2014
wont-fix

concrete5 disclosed a bug submitted by robin 
broken authentication

21 Sep 2014

Phabricator disclosed a bug submitted by shahmeer_amir 
Content Spoofing through URL

20 Sep 2014
wont-fix

Mail.Ru disclosed a bug submitted by vineet 
(m.mail.ru) Password type input with auto-complete enabled

19 Sep 2014
wont-fix

Mavenlink disclosed a bug submitted by vineet 
Clickjacking & CSRF attack can be done at https://app.mavenlink.com/login

19 Sep 2014

Mavenlink disclosed a bug submitted by vineet 
Clickjacking at https://www.mavenlink.com/ main website

19 Sep 2014

Detectify disclosed a bug submitted by mohdhaji87 
Password reset link not validated.

19 Sep 2014

CloudFlare disclosed a bug submitted by mohdhaji87 
User can request for password reset link without giving his website, eventhough he have it

19 Sep 2014
wont-fix

CloudFlare disclosed a bug submitted by jpsecurityresearch 
Apache mod_negotiation filename bruteforcing

19 Sep 2014
wont-fix

WePay disclosed a bug submitted by pranav_hivarekar 
CSRF (Make email primary) may lead to account compromise

19 Sep 2014

The Internet disclosed a bug submitted by kaeso 
Multiple issues in looking-glass software (aka from web to BGP injections)

17 Sep 2014

Phabricator disclosed a bug submitted by sehacure 
Open redirection on secure.phabricator.com

17 Sep 2014

Mail.Ru disclosed a bug submitted by bigbear 
Reflected XSS in User-Agent

16 Sep 2014

1 ... 308 309 310 311 312 ... 339

BY DENIS WERNER - @NOBBD - IMPRESSUM