Top10 publishers:

bobrov	114
linkks	75
geeknik	72
sp1d3rs	63
jobert	57
netfuzzer	47
guido	45
bl4de	42
ryat	40
bigbear_	38

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Bime disclosed a bug submitted by michiel 
Subdomain takeover due to unclaimed Amazon S3 bucket on a2.bime.io

22 Jun 2016

ThisData disclosed a bug submitted by 7h0r4pp4n 
Host Header Poisoning in thisdata.com

22 Jun 2016

bitaccess disclosed a bug submitted by geekboy 
BYASSING OTP Verification

22 Jun 2016

Pornhub disclosed a bug submitted by awake 
CSV Macro injection in Video Manager (CEMI)

22 Jun 2016

Pornhub disclosed a bug submitted by zephrfish 
Public Facing Barracuda Login

22 Jun 2016

Pornhub disclosed a bug submitted by mak 
Multiple endpoints are vulnerable to XML External Entity injection (XXE)

22 Jun 2016

Pornhub disclosed a bug submitted by zephrfish 
PornIQ Reflected Cross-Site Scripting

22 Jun 2016

Mail.Ru disclosed a bug submitted by samidrif 
Code source discloure & ability to get database information "SQL injection" in [townwars.mail.ru]

22 Jun 2016

Romit disclosed a bug submitted by eboda 
Session Fixation

22 Jun 2016

Nextcloud disclosed a bug submitted by japongskie 
No Rate Limiting on stats.nextcloud.com login

22 Jun 2016

Zomato disclosed a bug submitted by dejavuln 
Instagram OAuth2 Implementation Leaks Access Token; Allows for Cross-Site Script Inclusion (XSSI)

22 Jun 2016

Nextcloud disclosed a bug submitted by vivek_patil 
WordPress Vulnerabilities: User Enumeration, Vulnerable Akismet Plugin, XML-RPC Interface available

22 Jun 2016

Slack disclosed a bug submitted by mkbb 
Unauthenticated Access to some old file thumbnails

21 Jun 2016

HackerOne disclosed a bug submitted by jthetechguy 
All information is not removed from published reports

21 Jun 2016

Nextcloud disclosed a bug submitted by armfox97 
Deny access to download.nextcloud.com + folders

21 Jun 2016

Shopify disclosed a bug submitted by ksaurabh 
Fetching external resources through svg images

21 Jun 2016

Ruby disclosed a bug submitted by guido 
Heap corruption in string.c tr_trans() due to undersized buffer

21 Jun 2016

Ruby disclosed a bug submitted by guido 
Heap corruption in DateTime.strftime() on 32 bit for certain format strings

21 Jun 2016

Ruby disclosed a bug submitted by guido 
StringIO strio_getline() can divulge arbitrary memory

21 Jun 2016

Nextcloud disclosed a bug submitted by bugdiscloseguy 
Email ID Disclosure.

20 Jun 2016

1 ... 343 344 345 346 347 ... 447

BY DENIS WERNER - @NOBBD - IMPRESSUM