Top10 publishers:

bobrov	107
sp1d3rs	54
bigbear_	38
jobert	38
guido	37
bl4de	37
isox	36
geeknik	35
4lemon	35
edio	34

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Minr.es disclosed a bug submitted by smilez_hapiez 
Session Cookie without Secure flag set

20 Apr 2014
wont-fix

Localize disclosed a bug submitted by daksh 
Stored XSS

20 Apr 2014

Localize disclosed a bug submitted by smilez_hapiez 
Login page password-guessing attack

20 Apr 2014

Localize disclosed a bug submitted by smilez_hapiez 
Possible sensitive files

20 Apr 2014

Localize disclosed a bug submitted by daksh 
Making groups in any project without permission

20 Apr 2014

Localize disclosed a bug submitted by daksh 
Deleting groups in any project without permission

20 Apr 2014

HackerOne disclosed a bug submitted by javidhussain21 
Session Management

19 Apr 2014

HackerOne disclosed a bug submitted by satishb3 
Session not expired on logout

19 Apr 2014

HackerOne disclosed a bug submitted by mortes 
Flawed account creation process allows registration of usernames corresponding to existing file names

19 Apr 2014

HackerOne disclosed a bug submitted by niks 
A password reset page does not properly validate the authenticity token at the server side.

19 Apr 2014

HackerOne disclosed a bug submitted by wcypierre 
Weird Bug - Ability to see partial of other user's notification

19 Apr 2014

OkCupid disclosed a bug submitted by rizimughal 
DOM based XSS in changing email address

19 Apr 2014

Minr.es disclosed a bug submitted by shahmeer_amir 
OPTIONS method enabled on webserver

19 Apr 2014

Localize disclosed a bug submitted by jackds 
HTML/Javascript possible in "Discussion" section of reviews

19 Apr 2014

Localize disclosed a bug submitted by jackds 
Assigning a non-existing role to user causes exception when opening project page

19 Apr 2014

Localize disclosed a bug submitted by ashesh 
Password type input with auto-complete enabled

19 Apr 2014
wont-fix

Localize disclosed a bug submitted by jeroldcamacho 
CSRF in adding phrase.

19 Apr 2014

Localize disclosed a bug submitted by nahamsec 
Full Path Disclosure

19 Apr 2014

Localize disclosed a bug submitted by siddiki 
Full Path Disclosure (2)

19 Apr 2014

Localize disclosed a bug submitted by faisalahmed 
Full Path Disclosure (FPD) in www.localize.io

19 Apr 2014

1 ... 315 316 317 318 319 ... 325

BY DENIS WERNER - @NOBBD - IMPRESSUM