Top10 publishers:

bobrov	113
linkks	69
geeknik	62
sp1d3rs	61
jobert	49
guido	45
ryat	40
bl4de	39
bigbear_	38
isox	36

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Automattic disclosed a bug submitted by mohaab007 
Missing HSTS header in https://app.simplenote.com

16 Aug 2014
wont-fix

Twitter disclosed a bug submitted by jpsecurityresearch 
XSS ON MOPUB.COM

15 Aug 2014

Detectify disclosed a bug submitted by shahmeer_amir 
No logout mechanism due cookie tampering

15 Aug 2014
wont-fix

Slack disclosed a bug submitted by ashesh 
TLS1/SSLv3 Renegotiation Vulnerability

14 Aug 2014
wont-fix

Envoy disclosed a bug submitted by tdthechamp 
Authentication Bypass

14 Aug 2014
wont-fix

Factlink disclosed a bug submitted by shahmeer_amir 
Click-Jacking due to missing X-frame header

13 Aug 2014
wont-fix

Phabricator disclosed a bug submitted by tunnelshade 
XSS in editor by any user

13 Aug 2014

Slack disclosed a bug submitted by cliffordtrigo 
Content Spoofing

11 Aug 2014
wont-fix

Automattic disclosed a bug submitted by jeroldcamacho 
xss in simperium.com

10 Aug 2014

Automattic disclosed a bug submitted by niks 
privilege escalation

10 Aug 2014

Localize disclosed a bug submitted by jeroldcamacho 
missing sender policy framework (SPF)

09 Aug 2014

Envoy disclosed a bug submitted by shahmeer_amir 
Too much sensitive information in GET https://signwithenvoy.com/device_config/preview_badge

09 Aug 2014
wont-fix

CloudFlare disclosed a bug submitted by smiegles 
jplayer.swf Cross-site scripting

08 Aug 2014

CloudFlare disclosed a bug submitted by smiegles 
http://cdnjs.cloudflare.com/ Cross-site scripting 2

08 Aug 2014

StopTheHacker disclosed a bug submitted by dekeeu 
XSS Reflected - https://www.stopthehacker.com/

08 Aug 2014

Coin.co disclosed a bug submitted by blackb0xl33t 
Information disclosure : Web Server Version Details

08 Aug 2014

Yahoo! disclosed a bug submitted by michelgaschet 
Default /docs folder of PHPBB3 installation on gamesnet.yahoo.com

08 Aug 2014

RelateIQ disclosed a bug submitted by quistertow 
Cross Site Scripting (XSS) - app.relateiq.com

07 Aug 2014

Slack disclosed a bug submitted by prakharprasad 
Stored XSS in username.slack.com

07 Aug 2014

Mail.Ru disclosed a bug submitted by quistertow 
rs.mail.ru - Flash Based XSS

07 Aug 2014

1 ... 348 349 350 351 352 ... 374

BY DENIS WERNER - @NOBBD - IMPRESSUM