Top10 publishers:

bobrov	114
linkks	74
geeknik	71
sp1d3rs	62
jobert	54
guido	45
bl4de	42
ryat	40
bigbear_	38
zombiehelp54	37

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

ownCloud disclosed a bug submitted by kalihat007 
Cross site scripting in apps.owncloud.com

12 Apr 2016

APITest.IO disclosed a bug submitted by uyga 
beta version reveals paths, environment variables and partially files contents

12 Apr 2016

Dropbox disclosed a bug submitted by super_hack 
Possible SQL injection can cause denial of service attack

10 Apr 2016

Shopify disclosed a bug submitted by virtualhunter 
XSS on hardware.shopify.com

09 Apr 2016

ownCloud disclosed a bug submitted by nehalh13 
X-XSS-Protection not enabled

09 Apr 2016

Ubiquiti Networks disclosed a bug submitted by 93c08539 
Other Buffer Overflow in PHP of the AirMax Products

07 Apr 2016

Ubiquiti Networks disclosed a bug submitted by 93c08539 
Yet another Buffer Overflow in PHP of the AirMax Products

07 Apr 2016

Zomato disclosed a bug submitted by pr0tagon1st 
Persistent input validation mail encoding vulnerability in the "just followed you" email notification.

07 Apr 2016

Mail.Ru disclosed a bug submitted by seifelsallamy 
VERY DANGEROUS XSS STORED inside emails

07 Apr 2016

New Relic disclosed a bug submitted by xenonstory 
Old CAPTCHA offers no protection

07 Apr 2016

Trello disclosed a bug submitted by theflofly 
Payments informations are sent to the webhook when a team changes its visibility

07 Apr 2016

Gratipay disclosed a bug submitted by shahzaib-shani 
prevent content spoofing on /search

06 Apr 2016

Uber disclosed a bug submitted by pavanw3b 
Reflected XSS on Uber.com careers

06 Apr 2016

Uber disclosed a bug submitted by ddworken 
XSS in getrush.uber.com

06 Apr 2016

Uber disclosed a bug submitted by ddworken 
HTML Escaping Error in the 404 Page on developer.uber.com/docs/

06 Apr 2016

Uber disclosed a bug submitted by orange 
uber.com may RCE by Flask Jinja2 Template Injection

06 Apr 2016

Uber disclosed a bug submitted by ddworken 
CSV Injection in business.uber.com

06 Apr 2016

Uber disclosed a bug submitted by ddworken 
XSS In archive.uber.com Due to Mime Sniffing in IE

06 Apr 2016

Shopify disclosed a bug submitted by ancst 
Stored XSS via "Free Shipping" option (Discounts)

05 Apr 2016

HackerOne disclosed a bug submitted by lukasreschke 
External links should use rel="noopener" or use the redirect service

05 Apr 2016

1 ... 334 335 336 337 338 ... 419

BY DENIS WERNER - @NOBBD - IMPRESSUM