Top10 publishers:

bobrov	113
linkks	69
geeknik	62
sp1d3rs	61
jobert	49
guido	45
ryat	40
bl4de	39
bigbear_	38
isox	36

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Twitter disclosed a bug submitted by wesecureapp 
Flaw in login with twitter to steal Oauth tokens

18 Feb 2015

Localize disclosed a bug submitted by testalways 
PHP reveals potentially sensitive information via certain HTTP requests that contain specific QUERY strings.

17 Feb 2015

Localize disclosed a bug submitted by pulkit_pandey 
files likes of README.md is public

17 Feb 2015

Vimeo disclosed a bug submitted by harshafriend4all 
profile photo update bypass

17 Feb 2015

itBit Exchange disclosed a bug submitted by harshafriend4all 
weird bug ! ( missing validation on new email verfication )

14 Feb 2015

Vimeo disclosed a bug submitted by harshafriend4all 
Buying ondemand videos that 0.1 and sometimes for free

13 Feb 2015

Dropbox disclosed a bug submitted by panchocosil 
WP User Enumeration is possible at https://blog.dropbox.com

12 Feb 2015
wont-fix

Nearby Live disclosed a bug submitted by m0rph3u5 
Group Invite not properly authenticated

12 Feb 2015

Flash disclosed a bug submitted by netfuzzer 
chrome allows POST requests with custom headers using flash + 307 redirect

09 Feb 2015

Vimeo disclosed a bug submitted by balag_py 
Misconfigured crossdomain.xml - vimeo.com

09 Feb 2015
wont-fix

Twitter disclosed a bug submitted by sappi 
Account Deleted without any confirmation

05 Feb 2015
wont-fix

Square disclosed a bug submitted by anshuman_bh 
CSRF on adding clients

04 Feb 2015

Square disclosed a bug submitted by anshuman_bh 
CSRF on adding a calendar event

04 Feb 2015

HackerOne disclosed a bug submitted by atom 
Improper way of validating a program

04 Feb 2015

Python disclosed a bug submitted by ewok 
Multiple Python interger overflows

04 Feb 2015

Apache httpd disclosed a bug submitted by guido 
mod_lua: Crash in websockets PING handling

04 Feb 2015

HackerOne disclosed a bug submitted by danlec 
Vulnerability with the way \ escaped characters in <http://danlec.com> style links are rendered

03 Feb 2015

Vimeo disclosed a bug submitted by testalways 
Brute force on "vimeo" cookie

02 Feb 2015
wont-fix

Vimeo disclosed a bug submitted by shubham 
CSRF bypass

30 Jan 2015
wont-fix

Vimeo disclosed a bug submitted by testalways 
ftp upload of video allows naming that is not sanitized as the manual naming

29 Jan 2015

1 ... 335 336 337 338 339 ... 374

BY DENIS WERNER - @NOBBD - IMPRESSUM