Top10 publishers:

bobrov	114
linkks	74
geeknik	71
sp1d3rs	62
jobert	54
guido	45
bl4de	42
ryat	40
bigbear_	38
zombiehelp54	37

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Shopify disclosed a bug submitted by rms 
Apps can access 'channels' beta api

18 Nov 2015

Shopify disclosed a bug submitted by zombiehelp54 
deleted staff member can add his amazon marketplace web services account to the store.

18 Nov 2015

DigitalSellz disclosed a bug submitted by s_p_q_r 
Own downloading link isn't properly checked in the email template

16 Nov 2015

Mail.Ru disclosed a bug submitted by aesteral 
XSS: https://light.mail.ru/compose, https://m.mail.ru/compose/[id]/reply ??? ?????? ?? ??????????? ??????? ?????????????? ??????

16 Nov 2015

Binary.com disclosed a bug submitted by gjavado 
Http Response Splitting - Validate link

15 Nov 2015

Twitter disclosed a bug submitted by sandeep100928 
Problem with OAuth

14 Nov 2015

HackerOne disclosed a bug submitted by killr0x33d 
Send AJAX request to external domain

14 Nov 2015

HackerOne disclosed a bug submitted by ragnar 
Cross-domain AJAX request

14 Nov 2015

Binary.com disclosed a bug submitted by zombiehelp54 
login to any user's cashier account and full account information disclosure

14 Nov 2015

PHP disclosed a bug submitted by ryat 
zend_throw_or_error() format string vulnerability

14 Nov 2015

Python disclosed a bug submitted by androm3da 
tokenizer crash when processing undecodable source code

14 Nov 2015

Udemy disclosed a bug submitted by adrianbelen 
leak receipt of another user

13 Nov 2015

Zendesk disclosed a bug submitted by zombiehelp54 
Stored XSS in comments

13 Nov 2015

Mail.Ru disclosed a bug submitted by bigbear_ 
[ling.go.mail.ru] Server-Status opened for all users

13 Nov 2015

Binary.com disclosed a bug submitted by paulos_ 
Cross Site Scripting

13 Nov 2015

ownCloud disclosed a bug submitted by mohammedalsaggaf 
owncloud.com: Content Sniffing not disabled

12 Nov 2015

Shopify disclosed a bug submitted by elamaran619 
Privilege escalation and circumvention of permission to limited access user

11 Nov 2015

Slack disclosed a bug submitted by hassham 
File upload XSS (Java applet) on http://slackatwork.com/

11 Nov 2015

Slack disclosed a bug submitted by harry_mg 
Self-XSS in posts by formatting text as code

10 Nov 2015

Shopify disclosed a bug submitted by shahmeer-amir 
Accessing Payments page and adding payment methods with limited access accounts

10 Nov 2015

1 ... 348 349 350 351 352 ... 417

BY DENIS WERNER - @NOBBD - IMPRESSUM