Top10 publishers:

bobrov	114
linkks	75
geeknik	72
sp1d3rs	63
jobert	57
netfuzzer	47
guido	45
bl4de	42
ryat	40
bigbear_	38

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Ian Dunn disclosed a bug submitted by tbmnull 
stored SELF xss on Basic Google Maps Placemarks Settings plugin

27 Sep 2016

Ian Dunn disclosed a bug submitted by ethnicalhacker 
Potentially vulnerable version of Apache software in and default files on https://iandunn.name/

27 Sep 2016

Ian Dunn disclosed a bug submitted by superngorks 
bypass to csv injection

27 Sep 2016

Ian Dunn disclosed a bug submitted by jshindl 
Send emails to all users using Camptix

27 Sep 2016

Uber disclosed a bug submitted by jigarthakkar39 
Physical Access to Mobile App Allows Local Attribute Updates without Authentication

27 Sep 2016

Uber disclosed a bug submitted by bobrov 
Open Redirect in m.uber.com

27 Sep 2016

Trello disclosed a bug submitted by tgpanackal 
Unvalidated/Open Redirect allowing attackers to implement phishing attack

27 Sep 2016

Shopify disclosed a bug submitted by ishwar_prasad_bhat 
Payment gateway status transferred to Shopify without authentication

27 Sep 2016

Trello disclosed a bug submitted by cablej 
SSRF in account webhook (through API)

27 Sep 2016

Instacart disclosed a bug submitted by cablej 
Issues with uploading list images

26 Sep 2016

Instacart disclosed a bug submitted by hussain_0x3c 
Cookie-Based Injection

26 Sep 2016

Django disclosed a bug submitted by bobrov 
CSRF protection bypass on any Django powered site via Google Analytics

26 Sep 2016

Trello disclosed a bug submitted by mubassir92 
Subdomain Take over & username enemuration

26 Sep 2016

Mail.Ru disclosed a bug submitted by bobrov 
[odnoklassniki.ru] XSS via Host

26 Sep 2016

Shopify disclosed a bug submitted by bobrov 
[apps.shopify.com] Open Redirect

26 Sep 2016

ownCloud disclosed a bug submitted by m4drob0t 
Accessable Htaccess

26 Sep 2016

Keybase disclosed a bug submitted by bobrov 
[keybase.io] Open Redirect

26 Sep 2016

New Relic disclosed a bug submitted by foundstone-kunal 
Password disclosure during signup process

25 Sep 2016

New Relic disclosed a bug submitted by todayisnew 
Sensitive information contained with New Relic APM iOS application

25 Sep 2016

New Relic disclosed a bug submitted by karthic 
Unsafe HTML in reset password email and Account verification in email is missing in Sign up

25 Sep 2016

1 ... 326 327 328 329 330 ... 454

BY DENIS WERNER - @NOBBD - IMPRESSUM