Top10 publishers:

bobrov	113
linkks	69
geeknik	62
sp1d3rs	61
jobert	49
guido	45
ryat	40
bl4de	39
bigbear_	38
isox	36

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Slack disclosed a bug submitted by jobert 
Data exports stored on S3 can be scraped easily

09 Dec 2014

HackerOne disclosed a bug submitted by melvin 
Breaking Bugs as team member

09 Dec 2014

Eobot disclosed a bug submitted by surgent10cross 
IDOR on https://www.eobot.com/paypal

08 Dec 2014
wont-fix

Greenhouse.io disclosed a bug submitted by ashesh 
SMTP protection not used (please read carefully )

07 Dec 2014
wont-fix

InVision disclosed a bug submitted by internetwache 
Backup of wordpress configuration file found. Leaking database users/passwords

06 Dec 2014

Block.io disclosed a bug submitted by ashesh 
SMPT Protection not used, I can hijack your email server.

06 Dec 2014

Twitter disclosed a bug submitted by avram 
DOM Cross-Site Scripting ( XSS )

03 Dec 2014

Eobot disclosed a bug submitted by psych0tr1a 
Multiple information disclosure

01 Dec 2014
wont-fix

Twitter disclosed a bug submitted by siddiki 
Flaw in valid password policy.

30 Nov 2014
wont-fix

Eobot disclosed a bug submitted by masatokinugawa 
XSS in www.eobot.com(IE9 only)

29 Nov 2014

Twitter disclosed a bug submitted by mohdhaji87 
Broken authentication and invalidated email address leads to account takeover

28 Nov 2014
wont-fix

Twitter disclosed a bug submitted by anshuman_bh 
Creating Unauthorized Audience Lists

28 Nov 2014
wont-fix

IRCCloud disclosed a bug submitted by internetwache 
Weak password policy

27 Nov 2014
wont-fix

Coinbase disclosed a bug submitted by prakharprasad 
Coinbase Android Application - Bitcoin Wallet Leaks OAuth Response Code

26 Nov 2014

99designs disclosed a bug submitted by ashesh 
Source Code Disclosure (PHP)

26 Nov 2014

Ruby on Rails disclosed a bug submitted by nahamsec 
Arbitrary file existence disclosure in Action Pack

20 Nov 2014

Factlink disclosed a bug submitted by nahamsec 
File name/folder enumeration.

18 Nov 2014

IRCCloud disclosed a bug submitted by hari-cybex 
Password type input with auto-complete enabled

17 Nov 2014
wont-fix

IRCCloud disclosed a bug submitted by hari-cybex 
Missing Character Restriction

17 Nov 2014
wont-fix

Twitter disclosed a bug submitted by shahriyar 
Token remains alive ever after logging out!

17 Nov 2014
wont-fix

1 ... 339 340 341 342 343 ... 374

BY DENIS WERNER - @NOBBD - IMPRESSUM