Top10 publishers:

bobrov	114
linkks	75
geeknik	72
sp1d3rs	63
jobert	57
netfuzzer	47
guido	45
bl4de	42
ryat	40
bigbear_	38

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Shopify disclosed a bug submitted by pouya 
create staff member without owner access

29 Feb 2016

Gratipay disclosed a bug submitted by try_hack_x 
Sub Domian Take over

28 Feb 2016

Coinbase disclosed a bug submitted by datokaa 
Balance Manipulation - BUG

26 Feb 2016

LeaseWeb disclosed a bug submitted by cliffordtrigo 
DOM Based XSS in Checkout

26 Feb 2016

ownCloud disclosed a bug submitted by mrsihag 
The csrf token remains same after user logs in

25 Feb 2016

KIWI.KI GmbH disclosed a bug submitted by paresh_parmar 
Subdomain takeover : URGENT

25 Feb 2016

Udemy disclosed a bug submitted by decay 
Reflected XSS and/or malicious redirection via JWPlayer 6 configuration modification

24 Feb 2016

HackerOne disclosed a bug submitted by zombiehelp54 
Interstitial redirect bypass / open redirect in https://hackerone.com/zendesk_session

24 Feb 2016

HackerOne disclosed a bug submitted by yaworsk 
Unintended HTML inclusion as a result of https://hackerone.com/reports/110578

24 Feb 2016

Mail.Ru disclosed a bug submitted by konqi 
[3k.mail.ru] SQL Injection

24 Feb 2016

HackerOne disclosed a bug submitted by charfee 
Private Program Disclosure in /:handle/settings/allow_report_submission.json endpoint

24 Feb 2016

Mail.Ru disclosed a bug submitted by cyberpunkych 
SSRF ?? element.mail.ru

24 Feb 2016

InVision disclosed a bug submitted by sarwarjahan 
Deleting a Project for which the user is not owner but a normal member

23 Feb 2016

Shopify disclosed a bug submitted by brakhane 
S3 Buckets open to the world thanks to 'Authenticated Users' ACL

23 Feb 2016

HackerOne disclosed a bug submitted by zombiehelp54 
Null byte injection

23 Feb 2016

Udemy disclosed a bug submitted by geekboy 
Misconfigured SPF Record Flag

22 Feb 2016

Udemy disclosed a bug submitted by manishbitr 
Stored XSS

22 Feb 2016

LeaseWeb disclosed a bug submitted by armaanpathan1 
MISSING SPF RECORDS & MISSING DKIM POLICY

22 Feb 2016

Coinbase disclosed a bug submitted by hackeroxo1 
Session Issue Maybe Can lead to huge loss [CRITICAL]

21 Feb 2016

Gratipay disclosed a bug submitted by n00b3rm4n 
proxy port 7000 and shell port 514 not filtered

20 Feb 2016

1 ... 368 369 370 371 372 ... 447

BY DENIS WERNER - @NOBBD - IMPRESSUM