Top10 publishers:

bobrov	114
linkks	74
geeknik	71
sp1d3rs	62
jobert	54
guido	45
bl4de	42
ryat	40
bigbear_	38
zombiehelp54	37

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Shopify disclosed a bug submitted by shahmeer-amir 
Missing authorization check on dashboard overviews

10 Nov 2015

Slack disclosed a bug submitted by harry_mg 
Stored XSS in Slack (weird, trial and error)

10 Nov 2015

Shopify disclosed a bug submitted by brakhane 
A 'Full access' administrator is able to see the shop owners user details

10 Nov 2015

Shopify disclosed a bug submitted by rms 
List of devices is accessible regardless of the account limitations

10 Nov 2015

Slack disclosed a bug submitted by harry_mg 
Reflected Self-XSS in Slack

10 Nov 2015

Shopify disclosed a bug submitted by brakhane 
'Limited' RCE in certain places where Liquid is accepted

10 Nov 2015

Udemy disclosed a bug submitted by robd4k 
XSS Vulnerability

09 Nov 2015

Shopify disclosed a bug submitted by hazimaslam 
First & Last Name Disclosure of any Shopify Store Admin

09 Nov 2015

ownCloud disclosed a bug submitted by tomdev 
RCE in ci.owncloud.com / ci.owncloud.org

09 Nov 2015

Python disclosed a bug submitted by johnleitch 
PyFloat_FromString & PyNumber_Long Buffer Over-reads

08 Nov 2015

Shopify disclosed a bug submitted by hazimaslam 
Unauthorized access to any Store Admin's First & Last name

07 Nov 2015

InVision disclosed a bug submitted by mrrel 
Multiple Upload Vulnerability !File Upload + File Inclusion (Access Not Forbidden)

06 Nov 2015

Zopim disclosed a bug submitted by psychomantis 
CSV Excel Macro Injection Vulnerability in export chat logs

05 Nov 2015

Binary.com disclosed a bug submitted by shailesh4594 
User Enumeration : Due to rate limiting on registration

05 Nov 2015

The Internet disclosed a bug submitted by sparaschoudis 
libcurl duphandle read out of bounds

05 Nov 2015

ownCloud disclosed a bug submitted by ala_arfaoui 
apps.owncloud.com: Potential XSS

04 Nov 2015

Shopify disclosed a bug submitted by pouya 
get users information without full access

04 Nov 2015

Shopify disclosed a bug submitted by jitendra 
Bypassing password requirement during deletion of accout

03 Nov 2015

Shopify disclosed a bug submitted by uname 
Domain takoever - https://sellocdn.com

03 Nov 2015

Shopify disclosed a bug submitted by zombiehelp54 
Staff members with no permission to access domains can access them.

03 Nov 2015

1 ... 349 350 351 352 353 ... 417

BY DENIS WERNER - @NOBBD - IMPRESSUM