Top10 publishers:

bobrov	107
sp1d3rs	54
jobert	45
bl4de	39
bigbear_	38
guido	38
isox	36
4lemon	35
linkks	35
geeknik	35

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Slack disclosed a bug submitted by asdjsonyou 
Content Spoofing all Integrations in https://team.slack.com/services/new/

03 Sep 2014

HackerOne disclosed a bug submitted by siddiki 
Notification of previous signed out user leakage.

01 Sep 2014
wont-fix

Twitter disclosed a bug submitted by mohdhaji87 
Password reset link not validated.

31 Aug 2014
wont-fix

Slack disclosed a bug submitted by sehacure 
Broken Authentication (including Slack OAuth bugs)

30 Aug 2014

Slack disclosed a bug submitted by sehacure 
URL redirection flaw

30 Aug 2014

Slack disclosed a bug submitted by sehacure 
Stored XSS on this link https://sehacure.slack.com/help/requests/

30 Aug 2014

Uzbey LLC disclosed a bug submitted by atom 
Missing HSTS (Strict Transport Security)

29 Aug 2014

Uzbey LLC disclosed a bug submitted by dmc 
Price Manipulation

29 Aug 2014

concrete5 disclosed a bug submitted by mkly 
XSS in Theme Preview Tools File

28 Aug 2014

concrete5 disclosed a bug submitted by squirmy 
XSS on [/concrete/concrete/elements/dashboard/sitemap.php]

28 Aug 2014

jsDelivr disclosed a bug submitted by vineet 
Using nmap revealing sensitive information

28 Aug 2014

HackerOne disclosed a bug submitted by djamel 
Email changing

28 Aug 2014
wont-fix

Automattic disclosed a bug submitted by mohaab007 
Missing HSTS header in https://public-api.wordpress.com

28 Aug 2014
wont-fix

DC Compendium disclosed a bug submitted by adrianbelen 
source code disclosure

27 Aug 2014

Envoy disclosed a bug submitted by sasi2103 
Delete visitor from IPAD with fullname which contains JS results XSS

27 Aug 2014

Coinbase disclosed a bug submitted by 0ctac0der 
Simultaneous Session Logon : Improper Session Management

26 Aug 2014
wont-fix

RelateIQ disclosed a bug submitted by pum 
Failed Certificate Validation On Custom Server (Register)

25 Aug 2014

Coinbase disclosed a bug submitted by bbohn 
2FA settings allowed to be changed with no delay/freeze on funds

25 Aug 2014
wont-fix

Slack disclosed a bug submitted by asdjsonyou 
Open Redirect login account

25 Aug 2014

Slack disclosed a bug submitted by asdjsonyou 
Content spoofing at Stripe Integrations

25 Aug 2014

1 ... 310 311 312 313 314 ... 339

BY DENIS WERNER - @NOBBD - IMPRESSUM