Top10 publishers:

bobrov	107
linkks	60
sp1d3rs	56
jobert	46
guido	41
bl4de	39
bigbear_	38
isox	36
geeknik	35
4lemon	35

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Yahoo! disclosed a bug submitted by surgent10cross 
Comment Spoofing at http://suggestions.yahoo.com/detail/?prop=directory&fid=97721

20 Aug 2014

Yahoo! disclosed a bug submitted by surgent10cross 
CSRF Token missing on http://baseball.fantasysports.yahoo.com/b1/127146/messages

20 Aug 2014

Yahoo! disclosed a bug submitted by surgent10cross 
CSRF Token is missing on DELETE message option on http://baseball.fantasysports.yahoo.com/b1/127146/messages

20 Aug 2014

Yahoo! disclosed a bug submitted by internetwache 
Open Proxy, http://www.smushit.com/ysmush.it/, 4/09/14, #SpringClean

20 Aug 2014

Yahoo! disclosed a bug submitted by quistertow 
XSS in https://hk.user.auctions.yahoo.com

20 Aug 2014

Yahoo! disclosed a bug submitted by nahamsec 
readble .htaccess + Source Code Disclosure (+ .SVN repository)

20 Aug 2014

Yahoo! disclosed a bug submitted by cmaruti 
Infrastructure and Application Admin Interfaces (OWASP?CM?007)

20 Aug 2014

Yahoo! disclosed a bug submitted by cmaruti 
TESTING FOR REFLECTED CROSS SITE SCRIPTING (OWASP?DV?001)

20 Aug 2014

Yahoo! disclosed a bug submitted by cmaruti 
Testing for user enumeration (OWASP?AT?002) - https://gh.bouncer.login.yahoo.com

20 Aug 2014

Yahoo! disclosed a bug submitted by pytesus 
Multiple vulnerabilities

20 Aug 2014

Yahoo! disclosed a bug submitted by bobrov 
Open Redirect via Request-URI

20 Aug 2014

Yahoo! disclosed a bug submitted by jeroldcamacho 
Yahoo Sports Fantasy Golf (Join Public Group)

20 Aug 2014

jsDelivr disclosed a bug submitted by vineet 
Directory Traversal at http://staging.jsdelivr.net/

20 Aug 2014

Yahoo! disclosed a bug submitted by imadchabounia 
caesary.yahoo.net Blind Sql Injection

20 Aug 2014

WePay disclosed a bug submitted by anshuman_bh 
CSRF on email address operations. Also performing unintended operations.

19 Aug 2014

concrete5 disclosed a bug submitted by melvin 
Cross-Site Scripting in getMarketplacePurchaseFrame

18 Aug 2014

Factor.io disclosed a bug submitted by quistertow 
Reflected XSS - factor.io

18 Aug 2014

InVision disclosed a bug submitted by pranav_hivarekar 
Sensitive information in cookies

17 Aug 2014
wont-fix

DigitalSellz disclosed a bug submitted by bitquark 
Verbose SQL error messages

17 Aug 2014

DigitalSellz disclosed a bug submitted by faisalahmed 
USER Account is not being deleted after user "Delete Account" from DASHBOARD

17 Aug 2014

1 ... 322 323 324 325 326 ... 350

BY DENIS WERNER - @NOBBD - IMPRESSUM