Top10 publishers:

bobrov	107
linkks	60
sp1d3rs	56
jobert	46
guido	41
bl4de	39
bigbear_	38
isox	36
geeknik	35
4lemon	35

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

concrete5 disclosed a bug submitted by robin 
broken authentication

21 Sep 2014

Phabricator disclosed a bug submitted by shahmeer_amir 
Content Spoofing through URL

20 Sep 2014
wont-fix

Mail.Ru disclosed a bug submitted by vineet 
(m.mail.ru) Password type input with auto-complete enabled

19 Sep 2014
wont-fix

Mavenlink disclosed a bug submitted by vineet 
Clickjacking & CSRF attack can be done at https://app.mavenlink.com/login

19 Sep 2014

Mavenlink disclosed a bug submitted by vineet 
Clickjacking at https://www.mavenlink.com/ main website

19 Sep 2014

Detectify disclosed a bug submitted by mohdhaji87 
Password reset link not validated.

19 Sep 2014

CloudFlare disclosed a bug submitted by mohdhaji87 
User can request for password reset link without giving his website, eventhough he have it

19 Sep 2014
wont-fix

CloudFlare disclosed a bug submitted by jpsecurityresearch 
Apache mod_negotiation filename bruteforcing

19 Sep 2014
wont-fix

WePay disclosed a bug submitted by pranav_hivarekar 
CSRF (Make email primary) may lead to account compromise

19 Sep 2014

The Internet disclosed a bug submitted by kaeso 
Multiple issues in looking-glass software (aka from web to BGP injections)

17 Sep 2014

Phabricator disclosed a bug submitted by sehacure 
Open redirection on secure.phabricator.com

17 Sep 2014

Mail.Ru disclosed a bug submitted by bigbear 
Reflected XSS in User-Agent

16 Sep 2014

Khan Academy disclosed a bug submitted by bigbear 
Suffix of url-path is vulnerable to XSS-attack

16 Sep 2014

Detectify disclosed a bug submitted by shahmeer_amir 
Cookie manipulation does not log attacker out of the session

16 Sep 2014
wont-fix

Mail.Ru disclosed a bug submitted by bigbear 
SQL Injection on 11x11.mail.ru

16 Sep 2014

RelateIQ disclosed a bug submitted by shahmeer_amir 
Resubmitted with POC #18685 Password reset CSRF

16 Sep 2014

Automattic disclosed a bug submitted by pranav_hivarekar 
User Enumeration and Guessable User Account Attack on WORDPRESS

13 Sep 2014
wont-fix

Mail.Ru disclosed a bug submitted by vah13 
SQL inj

12 Sep 2014

HackerOne disclosed a bug submitted by thetime 
Redirect while opening links in new tabs

12 Sep 2014

Phabricator disclosed a bug submitted by djadmin 
Content spoofing

11 Sep 2014
wont-fix

1 ... 319 320 321 322 323 ... 350

BY DENIS WERNER - @NOBBD - IMPRESSUM