Top10 publishers:

bobrov	107
sp1d3rs	54
jobert	44
bl4de	39
bigbear_	38
guido	37
isox	36
geeknik	35
4lemon	35
edio	34

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Uzbey LLC disclosed a bug submitted by chmosama 
Information Disclosure (phpinfo())

28 Jun 2014

IRCCloud disclosed a bug submitted by pseudochu 
Reflected XSS in Pastebin-view

28 Jun 2014

PHP disclosed a bug submitted by johnleitch 
Locale::parseLocale Double Free

27 Jun 2014

Phabricator disclosed a bug submitted by sehacure 
CSRF token valid even after the session logout of a particular user

26 Jun 2014
wont-fix

IRCCloud disclosed a bug submitted by chandrakant 
User Account Creation CSRF

25 Jun 2014

Coin.co disclosed a bug submitted by guido 
Facilitation of XSS attacks through supporting the HTTP TRACE method (cross-site tracing)

25 Jun 2014

Coin.co disclosed a bug submitted by stalker 
Found clickjacking vulnerability

24 Jun 2014

Python disclosed a bug submitted by arizvisa 
integer overflow in 'buffer' type allows reading memory

24 Jun 2014

Python disclosed a bug submitted by guido 
Python vulnerability: reading arbitrary process memory

20 Jun 2014

HackerOne disclosed a bug submitted by idps 
Potential denial of service in hackerone.com/teams/new

20 Jun 2014

Sandbox Escape disclosed a bug submitted by comex 
Linux PI futex self-requeue bug

19 Jun 2014

Flash disclosed a bug submitted by kinine 
Flash Sandbox Bypass

19 Jun 2014

Coin.co disclosed a bug submitted by internetwache 
Wordpress readme.html / X-Powered-By-Header (low crit)

19 Jun 2014
wont-fix

Phabricator disclosed a bug submitted by tunnelshade 
Abusing daemon logs for Privilege escalation under certain scenarios

18 Jun 2014

FanFootage disclosed a bug submitted by shubham 
Session Token is not Verified while changing Account Setting's which Result In account Takeover

14 Jun 2014

IRCCloud disclosed a bug submitted by gunda 
Log Out Cross site Request Forgery

13 Jun 2014

Coin.co disclosed a bug submitted by anshuman_bh 
Coin.co Admin interface accessible externally

13 Jun 2014
wont-fix

Phabricator disclosed a bug submitted by tunnelshade 
Abusing VCS control on phabricator

13 Jun 2014

HackerOne disclosed a bug submitted by siddiki 
Adding an user email address to the list before confirming.

11 Jun 2014
wont-fix

Minr.es disclosed a bug submitted by nahamsec 
readable .htaccess

11 Jun 2014

1 ... 315 316 317 318 319 ... 333

BY DENIS WERNER - @NOBBD - IMPRESSUM