Top10 publishers:

bobrov	113
linkks	69
geeknik	62
sp1d3rs	61
jobert	49
guido	45
ryat	40
bl4de	39
bigbear_	38
isox	36

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Khan Academy disclosed a bug submitted by bigbear 
CRLF Injection

07 Aug 2014
wont-fix

Khan Academy disclosed a bug submitted by bigbear 
Unchecking hidden parameter is vulnerable to XSS-attack

07 Aug 2014
wont-fix

Mail.Ru disclosed a bug submitted by quistertow 
Flash XSS in http://go.mail.ru

07 Aug 2014

FanFootage disclosed a bug submitted by shahmeer_amir 
Cookie fixation

07 Aug 2014

Mail.Ru disclosed a bug submitted by bigbear 
Reflected XSS

07 Aug 2014

Uzbey LLC disclosed a bug submitted by bitquark 
SQL injection, tile ID

07 Aug 2014

Uzbey LLC disclosed a bug submitted by gangw4n 
CMS Information Disclosure

07 Aug 2014

Uzbey LLC disclosed a bug submitted by knightsword 
Cross site scripting in type parameter

07 Aug 2014

Uzbey LLC disclosed a bug submitted by vineet 
Clickjacking at https://staging.uzbey.com/

07 Aug 2014
wont-fix

Uzbey LLC disclosed a bug submitted by chintangurjar 
Email Flooding Vuln

07 Aug 2014

Automattic disclosed a bug submitted by mtk 
Open Redirect in WordPress Feed Statistics {Affected All Versions}

07 Aug 2014

Yahoo! disclosed a bug submitted by nnwakelam 
http://conf.member.yahoo.com configuration file disclosure

06 Aug 2014

MoneyStream disclosed a bug submitted by shahmeer_amir 
Here is another XSS i got for you

06 Aug 2014

Yahoo! disclosed a bug submitted by cliffordtrigo 
XSS in Yahoo! Web Analytics

06 Aug 2014

Yahoo! disclosed a bug submitted by nnwakelam 
Significant Information Disclosure/Load balancer access, http://extprodweb11.cc.gq1.yahoo.com/, 4/8/14, #SpringClean

06 Aug 2014

Yahoo! disclosed a bug submitted by nnwakelam 
reflected XSS, http://extprodweb11.cc.gq1.yahoo.com/, 4/8/14, #SpringClean

06 Aug 2014

Yahoo! disclosed a bug submitted by nnwakelam 
REMOTE CODE EXECUTION/LOCAL FILE INCLUSION/XSPA/SSRF, view-source:http://sb*.geo.sp1.yahoo.com/, 4/6/14, #SpringClean

06 Aug 2014

Yahoo! disclosed a bug submitted by nnwakelam 
invite1.us2.msg.vip.bf1.yahoo.com/ - CSRF/email disclosure

06 Aug 2014

Yahoo! disclosed a bug submitted by nnwakelam 
https://caldav.calendar.yahoo.com/ - XSS (STORED)

06 Aug 2014

Yahoo! disclosed a bug submitted by nnwakelam 
information disclosure (LOAD BALANCER + URI XSS)

06 Aug 2014

1 ... 349 350 351 352 353 ... 374

BY DENIS WERNER - @NOBBD - IMPRESSUM