Top10 publishers:

bobrov	114
linkks	75
geeknik	72
sp1d3rs	63
jobert	57
netfuzzer	47
guido	45
bl4de	42
ryat	40
bigbear_	38

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Trello disclosed a bug submitted by thezawad 
XSS in Jetpack plugin

08 Jun 2016

LocalTapiola disclosed a bug submitted by billy_blaze 
Possibly big authorization problem in Lähitapiola´s varainhoito

08 Jun 2016

Veris disclosed a bug submitted by footstep 
Unauthenticated CSRF(User can input any value for CSRF Token)

08 Jun 2016

Phabricator disclosed a bug submitted by fnqgpc 
Full path disclosure

08 Jun 2016

HackerOne disclosed a bug submitted by c666a323be94d57 
RCE in profile picture upload

08 Jun 2016

Coinbase disclosed a bug submitted by anik 
Transaction Pending Via Ip Change

07 Jun 2016

Uber disclosed a bug submitted by err 
Password Reset Does Not Confirm the Existence of an Email Address

07 Jun 2016

New Relic disclosed a bug submitted by the_joker 
Session takeover

06 Jun 2016

QIWI disclosed a bug submitted by ngaurav 
SSL Certificate on qiwi.com will expire soon.

06 Jun 2016

Uber disclosed a bug submitted by jouko 
Compromising Atlassian Confluence (team.uberinternal.com) via WordPress (newsroom.uber.com)

06 Jun 2016

Uber disclosed a bug submitted by jouko 
OneLogin authentication bypass on WordPress sites

06 Jun 2016

Automattic disclosed a bug submitted by akshyy 
Remove anyone's pic gravtar

05 Jun 2016

Badoo disclosed a bug submitted by esevece 
Tokens from services like Facebook can be stolen

03 Jun 2016

Badoo disclosed a bug submitted by saeedhashem 
Ability to collect users' ids that have visited a specific web page with malicious code

03 Jun 2016

Ubiquiti Networks disclosed a bug submitted by ebrietas 
Auth bypass on directory.corp.ubnt.com

02 Jun 2016

WePay disclosed a bug submitted by krankopwnz 
Unauthenticated Stored XSS in API Panel

02 Jun 2016

Shopify disclosed a bug submitted by ogig 
SVG parser loads external resources on image upload

02 Jun 2016

Mapbox disclosed a bug submitted by dawgyg 
Reflected cross-site scripting (XSS) on api.tiles.mapbox.com

01 Jun 2016

Zendesk disclosed a bug submitted by eboda 
Stored XSS on [your_zendesk].zendesk.com in Facebook Channel

01 Jun 2016

Zendesk disclosed a bug submitted by albinowax 
Stored XSS via Angular Expression injection on developer.zendesk.com

01 Jun 2016

1 ... 350 351 352 353 354 ... 447

BY DENIS WERNER - @NOBBD - IMPRESSUM