Top10 publishers:

bobrov	114
geeknik	70
linkks	69
sp1d3rs	61
jobert	50
guido	45
bl4de	41
ryat	40
bigbear_	38
zombiehelp54	37

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Twitter disclosed a bug submitted by mohdhaji87 
Broken authentication and invalidated email address leads to account takeover

28 Nov 2014
wont-fix

Twitter disclosed a bug submitted by anshuman_bh 
Creating Unauthorized Audience Lists

28 Nov 2014
wont-fix

IRCCloud disclosed a bug submitted by internetwache 
Weak password policy

27 Nov 2014
wont-fix

Coinbase disclosed a bug submitted by prakharprasad 
Coinbase Android Application - Bitcoin Wallet Leaks OAuth Response Code

26 Nov 2014

99designs disclosed a bug submitted by ashesh 
Source Code Disclosure (PHP)

26 Nov 2014

Ruby on Rails disclosed a bug submitted by nahamsec 
Arbitrary file existence disclosure in Action Pack

20 Nov 2014

Factlink disclosed a bug submitted by nahamsec 
File name/folder enumeration.

18 Nov 2014

IRCCloud disclosed a bug submitted by hari-cybex 
Password type input with auto-complete enabled

17 Nov 2014
wont-fix

IRCCloud disclosed a bug submitted by hari-cybex 
Missing Character Restriction

17 Nov 2014
wont-fix

Twitter disclosed a bug submitted by shahriyar 
Token remains alive ever after logging out!

17 Nov 2014
wont-fix

The Internet disclosed a bug submitted by mik 
rsync hash collisions may allow an attacker to corrupt or modify files

17 Nov 2014

Secret disclosed a bug submitted by vinothkumar 
Broken Authentication and Session Management

17 Nov 2014

Square disclosed a bug submitted by cliffordtrigo 
XSS [BookFresh]

17 Nov 2014

ExpressionEngine disclosed a bug submitted by deadlock 
Stored Cross-Site Scripting Vulnerability in /admin.php?/cp/admin_system/general_configuration

17 Nov 2014

Square disclosed a bug submitted by cliffordtrigo 
XSS in Client Past Activity

17 Nov 2014

Square disclosed a bug submitted by avlidienbrunn 
CRITICAL Account takeover via AngularJS template injection in connect.squareup.com

17 Nov 2014

Twitter disclosed a bug submitted by internetwache 
Full path disclosure at ads.twitter.com

17 Nov 2014

Square disclosed a bug submitted by cliffordtrigo 
Editing Client Details of other People

17 Nov 2014

Twitter disclosed a bug submitted by arbitrarycode 
ads.twitter.com xss

17 Nov 2014

Square disclosed a bug submitted by adrianbelen 
malicious file upload

17 Nov 2014

1 ... 350 351 352 353 354 ... 385

BY DENIS WERNER - @NOBBD - IMPRESSUM