Top10 publishers:

bobrov	114
linkks	75
geeknik	72
sp1d3rs	63
jobert	57
netfuzzer	47
guido	45
bl4de	42
ryat	40
bigbear_	38

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Slack disclosed a bug submitted by uranium238 
Snooping into messages via email service

14 Sep 2016

Uber disclosed a bug submitted by uranium238 
Reading Emails in Uber Subdomains

14 Sep 2016

Zomato disclosed a bug submitted by mr__robot 
CSRF AT INVITING PEOPLE THOUGH PHONE NUMBER

14 Sep 2016

GoCD disclosed a bug submitted by mr__robot 
Directory Listening

14 Sep 2016

Vimeo disclosed a bug submitted by opnsec 
XSS in Subtitles of Vimeo Flash Player and Hubnut

14 Sep 2016

Boozt Fashion AB disclosed a bug submitted by hacking79 
XSS

14 Sep 2016

OLX disclosed a bug submitted by surajsp 
these are my old reports and still i have not receive any good replys, these all are Cross Site Scripting(XSS) issues: POC1: https://www.youtube.com/w

14 Sep 2016

Coursera disclosed a bug submitted by secalert 
XSS in https://www.coursera.org/courses/

14 Sep 2016

Boozt Fashion AB disclosed a bug submitted by zephrfish 
Instance of Apache Vulnerable to Several Issues

14 Sep 2016

Bime disclosed a bug submitted by agarri_fr 
SSRF in the Connector Designer (REST and Elastic Search)

14 Sep 2016

Bime disclosed a bug submitted by agarri_fr 
The JDBC driver used by the Vertica connector allows to create files on the backends

14 Sep 2016

Bime disclosed a bug submitted by agarri_fr 
XXE in the Connector Designer

14 Sep 2016

Nextcloud disclosed a bug submitted by spetr0x 
Unauthenticated Stored xss

13 Sep 2016

Instacart disclosed a bug submitted by sameoldstory 
Fetch private list metadata and any user's personal name

12 Sep 2016

Instacart disclosed a bug submitted by corb3nik 
Hyperlink Injection in Friend Invitation Emails

12 Sep 2016

Instacart disclosed a bug submitted by cablej 
Missing rel=noreferrer tag allows link in list to change url of currently open tab

12 Sep 2016

Instacart disclosed a bug submitted by mefkan 
Image Upload Path Disclosure

12 Sep 2016

Legal Robot disclosed a bug submitted by cablej 
User Information sent to client through websockets

12 Sep 2016

Legal Robot disclosed a bug submitted by cablej 
User Information leak allows user to bypass email verification.

12 Sep 2016

Pornhub disclosed a bug submitted by zephrfish 
[crossdomain.xml] Dangerous Flash Cross-Domain Policy

12 Sep 2016

1 ... 322 323 324 325 326 ... 447

BY DENIS WERNER - @NOBBD - IMPRESSUM