Top10 publishers:

bobrov	114
linkks	75
geeknik	72
sp1d3rs	63
jobert	57
netfuzzer	47
guido	45
bl4de	42
ryat	40
bigbear_	38

Now on Twitter

the unofficial HackerOne disclosure timeline.

X

Khan Academy disclosed a bug submitted by smiegles 
Dom based XSS https://www.khanacademy.org/

09 Apr 2014

Khan Academy disclosed a bug submitted by smiegles 
https://www.khanacademy.org/login open-redirect

09 Apr 2014

Khan Academy disclosed a bug submitted by smiegles 
Stored XSS {dangerous?} https://www.khanacademy.org/coach/roster/?listId=allStudents

09 Apr 2014

Khan Academy disclosed a bug submitted by smiegles 
https://www.khanacademy.org/coach/reports/activity XSS

09 Apr 2014

Khan Academy disclosed a bug submitted by smiegles 
Persistent class XSS [the fuck]

09 Apr 2014

concrete5 disclosed a bug submitted by g4mm4 
https://concrete5.org ::: HeartBleed Attack (CVE-2014-0160)

09 Apr 2014

Khan Academy disclosed a bug submitted by chmosama 
Weak Ciphers Enabled

09 Apr 2014

Khan Academy disclosed a bug submitted by atom 
Open Redirection in SmartHistory KhanAcademy

09 Apr 2014

Khan Academy disclosed a bug submitted by prakharprasad 
XSS at http://smarthistory.khanacademy.org

09 Apr 2014

Factlink disclosed a bug submitted by jobert 
Proxy discloses internal web servers

08 Apr 2014

OkCupid disclosed a bug submitted by smiegles 
http://www2.okcupid.com/profile Cross-site scripting

08 Apr 2014

Slack disclosed a bug submitted by netfuzzer 
flash content type sniff vulnerability in api.slack.com

08 Apr 2014

Flash disclosed a bug submitted by masatokinugawa 
Security bypass could lead to information disclosure

08 Apr 2014

Yahoo! disclosed a bug submitted by santese 
From Unrestricted File Upload to Remote Command Execution

07 Apr 2014

C2FO disclosed a bug submitted by chmosama 
OPTIONS Method Enabled

07 Apr 2014

OpenSSL disclosed a bug submitted by Default 
TLS heartbeat read overrun

07 Apr 2014

Yahoo! disclosed a bug submitted by jniemasik 
In Fantasy Sports iOS app, signup page is requested over HTTP

06 Apr 2014
wont-fix

Slack disclosed a bug submitted by sehacure 
csrf

06 Apr 2014

Slack disclosed a bug submitted by sehacure 
State parameter missing on google OAuth

06 Apr 2014

Slack disclosed a bug submitted by sehacure 
Open redirect vulnerability

06 Apr 2014
wont-fix

1 ... 442 443 444 445 446 ... 448

BY DENIS WERNER - @NOBBD - IMPRESSUM