Top10 publishers:

bobrov	114
linkks	73
geeknik	70
sp1d3rs	62
jobert	51
guido	45
bl4de	42
ryat	40
bigbear_	38
zombiehelp54	37

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Localize disclosed a bug submitted by siddiki 
Full path disclosure

18 Apr 2014

Localize disclosed a bug submitted by quistertow 
Path Disclosure (Info Disclosure) in http://www.localize.io

18 Apr 2014

Localize disclosed a bug submitted by melvin 
Uninitialized variable error message leaks information

18 Apr 2014

Localize disclosed a bug submitted by melvin 
No Cross-Site Request Forgery protection at multiple locations

18 Apr 2014

Localize disclosed a bug submitted by rajuraju14 
Information Disclosure (Directory Structure)

18 Apr 2014

Localize disclosed a bug submitted by ashesh 
User credentials are sent in clear text

18 Apr 2014
wont-fix

Localize disclosed a bug submitted by shahmeer_amir 
Sensitive file

18 Apr 2014

Localize disclosed a bug submitted by nahamsec 
Apache Documentation

18 Apr 2014

Flash disclosed a bug submitted by kinine 
Flash local-with-fileaccess Sandbox Bypass

17 Apr 2014

Lookout disclosed a bug submitted by chmosama 
DOM-XSS Vulnerability

17 Apr 2014

HackerOne disclosed a bug submitted by leander 
creating titleless and non-closable bugs

17 Apr 2014

concrete5 disclosed a bug submitted by occupe 
FULL PATH DISCLOSUR

17 Apr 2014

Phabricator disclosed a bug submitted by tomvg 
Persistent XSS: Editor link

16 Apr 2014

concrete5 disclosed a bug submitted by tomdev 
HttpOnly flag not set for cookie on concrete5.org

16 Apr 2014

concrete5 disclosed a bug submitted by atom 
XSS IN member List (Because of City Textbox)

16 Apr 2014

Lookout disclosed a bug submitted by internetwache 
Clickjacking at https://jira.corp.lookout.com

15 Apr 2014

C2FO disclosed a bug submitted by internetwache 
Password reset token leakage through referrer at https://app.c2fo.com/password/reset/

15 Apr 2014
wont-fix

Khan Academy disclosed a bug submitted by internetwache 
User guessing/enumeration at sw.khanacademy.org

15 Apr 2014
wont-fix

Faceless disclosed a bug submitted by shahmeer_amir 
Bruteforce attack in login panel

15 Apr 2014

IRCCloud disclosed a bug submitted by melvin 
Full account takeover using CSRF and password reset

14 Apr 2014

1 ... 383 384 385 386 387 ... 391

BY DENIS WERNER - @NOBBD - IMPRESSUM