Top10 publishers:

bobrov	114
linkks	75
geeknik	72
sp1d3rs	63
jobert	57
netfuzzer	47
guido	45
bl4de	42
ryat	40
bigbear_	38

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

HackerOne disclosed a bug submitted by nismo 
Distinguish EP+Private vs Private programs in HackerOne

25 Apr 2016

HackerOne disclosed a bug submitted by kirkj 
Mediation link can be accepted by other users

25 Apr 2016

New Relic disclosed a bug submitted by mg94 
Synthetics Xss

25 Apr 2016

HackerOne disclosed a bug submitted by stewie 
CSV Injection via the CSV export feature

25 Apr 2016

Uber disclosed a bug submitted by iad 
SQLi in love.uber.com

25 Apr 2016

Uber disclosed a bug submitted by pwder 
Pixel flood attack in https://riders.uber.com/profile

25 Apr 2016

Uber disclosed a bug submitted by mohaab007 
It is possible to re-rate a driver after a very long time

25 Apr 2016

Uber disclosed a bug submitted by rohk 
Open Redirection on Uber.com

22 Apr 2016

Veris disclosed a bug submitted by reactors08 
www.veris.in DOM based XSS

22 Apr 2016

Coinbase disclosed a bug submitted by atheistoffail 
Sending payments via QR code does not require confirmation

22 Apr 2016

Twitter disclosed a bug submitted by ashish_goanhacker 
xss in DM group name in twitter

22 Apr 2016

Badoo disclosed a bug submitted by yaworsk 
AWS S3 Bucket hotornot-images permissions allow for listing and removing files

22 Apr 2016

HackerOne disclosed a bug submitted by pisarenko 
Multiple issues with Markdown and URL parsing

21 Apr 2016

HackerOne disclosed a bug submitted by niemand 
CSV Injection at the CSV export feature

21 Apr 2016

HackerOne disclosed a bug submitted by ashish_goanhacker 
Abusing HOF rankings in limited circumstances

21 Apr 2016

HackerOne disclosed a bug submitted by techguynoob 
User with Read-Only permissions can manually public disclosure the report

21 Apr 2016

HackerOne disclosed a bug submitted by paulos_ 
Possible XSS

21 Apr 2016

HackerOne disclosed a bug submitted by cablej 
Websites opened from reports can change url of report page

21 Apr 2016

HackerOne disclosed a bug submitted by meals 
Deleted name still present via mouseover functionality for user accounts

21 Apr 2016

Shopify disclosed a bug submitted by pranav_hivarekar 
Privilege Escalation - A `MEMBER` with no ACCESS to `ORDERS` can still access the orders by using `Order Printer APP`

20 Apr 2016

1 ... 361 362 363 364 365 ... 448

BY DENIS WERNER - @NOBBD - IMPRESSUM