REPORTS
PROGRAMS
PUBLISHERS
Top10 publishers:
b'bobrov'
117
b'sp1d3rs'
86
b'geeknik'
81
b'linkks'
75
b'jobert'
70
b'someonenobbd'
62
b'nyymi'
58
b'ooooooo_q'
52
b'guido'
50
b'haxta4ok00'
49
Now on Twitter
the unofficial
HackerOne
disclosure timeline.
X
b'Keybase'
disclosed a bug submitted by
b'edio'
b'Keybase extension hostname-validation regular expression issue.'
26 Jan 2018
b'Mail.Ru'
disclosed a bug submitted by
b'maxarr'
b'XSS ? ??????, ? ???? ??????.'
26 Jan 2018
b'Mail.Ru'
disclosed a bug submitted by
b'maxarr'
b'XSS ? ???? ??????, ? ??????? ??????.'
26 Jan 2018
b'Mail.Ru'
disclosed a bug submitted by
b'obmihail'
b'Self-xss via drag&drop in email form'
26 Jan 2018
b'Mail.Ru'
disclosed a bug submitted by
b'obmihail'
b'XSS on account.mail.ru/login'
26 Jan 2018
b'Mail.Ru'
disclosed a bug submitted by
b'hudmi'
b'Uninitilized server memory disclosure via ImageMagick'
26 Jan 2018
b'Brave Software'
disclosed a bug submitted by
b'dutchgraa'
b'Torrent Viewer extension web service available on all interfaces'
26 Jan 2018
b'Slack'
disclosed a bug submitted by
b'juji'
b'Unauthenticated LFI revealing log information'
26 Jan 2018
b'Node.js third-party modules'
disclosed a bug submitted by
b'nwoltman'
b'Fastify denial-of-service vulnerability with large JSON payloads'
25 Jan 2018
b'Razer US'
disclosed a bug submitted by
b'edio'
b'Authenticated DOM-based XSS in deals.razerzone.com via the rurl parameter.'
24 Jan 2018
b'Razer US'
disclosed a bug submitted by
b's_p_q_r'
b'[zvault.razerzone.com] URL validation bypass'
24 Jan 2018
b'Razer US'
disclosed a bug submitted by
b'edio'
b'POST XSS in careers.razerzone.com via the txt_email parameter.'
24 Jan 2018
b'Razer US'
disclosed a bug submitted by
b'arafat'
b'Reflected XSS on https://press.razerzone.com'
24 Jan 2018
b'Keybase'
disclosed a bug submitted by
b'edio'
b'Claiming ownership of GitHub handles via forked GitHub gists.'
23 Jan 2018
b'HackerOne'
disclosed a bug submitted by
b'us111'
b'While adding a payment method - Notification email not sent to newly added email ID as well as there is no verification for new email id (Paypal)'
23 Jan 2018
b'Node.js third-party modules'
disclosed a bug submitted by
b'bl4de'
b'[serve] Directory index of arbitrary folder available due to lack of sanitization of %2e and %2f characters in url'
23 Jan 2018
b'Node.js third-party modules'
disclosed a bug submitted by
b'ysx'
b'[augustine] Static Web Server Directory Traversal via Crafted GET Request'
23 Jan 2018
b'Node.js third-party modules'
disclosed a bug submitted by
b'ysx'
b'[lactate] Static Web Server Directory Traversal via Crafted GET Request'
23 Jan 2018
b'Node.js third-party modules'
disclosed a bug submitted by
b'ysx'
b'[redis-commander] Reflected SWF XSS via vulnerable "clipboard.swf" component'
23 Jan 2018
b'Starbucks'
disclosed a bug submitted by
b'bigbug'
b'SQL injection in partner id field on https://www.teavana.com (Sign-up form)'
23 Jan 2018
1
...
474
475
476
477
478
...
732
BY DENIS WERNER - @NOBBD -
IMPRESSUM