Top10 publishers:

bobrov	114
linkks	73
geeknik	71
sp1d3rs	62
jobert	52
guido	45
bl4de	42
ryat	40
bigbear_	38
zombiehelp54	37

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Coin.co disclosed a bug submitted by koutrouss 
Report: Wordpress Bug!???

28 Jan 2015
wont-fix

PHP disclosed a bug submitted by sparaschoudis 
heap buffer overflow in enchant_broker_request_dict()

26 Jan 2015

Vimeo disclosed a bug submitted by shamrocksu88 
Vimeo Search - XSS Vulnerability [http://vimeo.com/search]

23 Jan 2015

WePay disclosed a bug submitted by dreamzz 
Broken Authentication – Session Token bug

22 Jan 2015
wont-fix

Vimeo disclosed a bug submitted by avlidienbrunn 
Make API calls on behalf of another user (CSRF protection bypass)

22 Jan 2015

HackerOne disclosed a bug submitted by d4d1a179c0f3 
"early preview" programs disclosure

21 Jan 2015
wont-fix

Vimeo disclosed a bug submitted by prashanthvarmadomma 
unvalid open authentication with facebook

21 Jan 2015

Vimeo disclosed a bug submitted by geekboy 
USER PRIVACY VIOLATED (PRIVATE DATA GETTING TRANSFER OVER INSECURE CHANNEL )

20 Jan 2015
wont-fix

PHP disclosed a bug submitted by endeavor 
Free called on unitialized pointer in exif.c

20 Jan 2015

PHP disclosed a bug submitted by sesser 
Use after free vulnerability in unserialize()

20 Jan 2015

Localize disclosed a bug submitted by pouya 
PHP PDOException and Full Path Disclosure

18 Jan 2015

Revert disclosed a bug submitted by internetwache 
Missing SPF header on revert.io

18 Jan 2015

QIWI disclosed a bug submitted by fishumu 
Metadata in hosted files is disclosing Usernames, Printers, paths, admin guides. emails

18 Jan 2015
wont-fix

Openfolio disclosed a bug submitted by harshafriend4all 
xss in /browse/contacts/

14 Jan 2015

Phabricator disclosed a bug submitted by nullsub 
Phabricator Phame Blog Skins Local File Inclusion

14 Jan 2015

Informatica disclosed a bug submitted by dreamzz 
Missing SPF for informatica.com

12 Jan 2015
wont-fix

Slack disclosed a bug submitted by fransrosen 
Facebook Takeover using Slack using 302 from files.slack.com with access_token

11 Jan 2015

Mail.Ru disclosed a bug submitted by 4lemon 
Stored XSS on http://top.mail.ru

10 Jan 2015

Phabricator disclosed a bug submitted by nullsub 
Phabricator Diffusion application allows unauthorized users to delete mirrors

09 Jan 2015

Vimeo disclosed a bug submitted by artem 
APIs for channels allow HTML entities that may cause XSS issue

08 Jan 2015

1 ... 368 369 370 371 372 ... 406

BY DENIS WERNER - @NOBBD - IMPRESSUM