REPORTS
PROGRAMS
PUBLISHERS
Top10 publishers:
b'bobrov'
117
b'sp1d3rs'
86
b'geeknik'
84
b'linkks'
75
b'jobert'
70
b'nyymi'
67
b'someonenobbd'
62
b'ooooooo_q'
54
b'guido'
50
b'haxta4ok00'
49
Now on Twitter
the unofficial
HackerOne
disclosure timeline.
X
b'Legal Robot'
disclosed a bug submitted by
b'asaxena2190'
b'Null Byte Injection in all fields of Profile'
24 Feb 2018
b'Twitter'
disclosed a bug submitted by
b'harisec'
b'Persistent DOM-based XSS in https://help.twitter.com via localStorage'
24 Feb 2018
b'Snapchat'
disclosed a bug submitted by
b'abritest'
b'Takeover 2 MAIN DOMAINS of a company Acquired by Snapchat'
23 Feb 2018
b'Ruby'
disclosed a bug submitted by
b'edoverflow'
b'Resolv::getaddresses bug that can be abused to bypass security measures. '
23 Feb 2018
b'Ruby'
disclosed a bug submitted by
b'finb'
b'Integer Underflow @ ossl_cipher_pkcs5_keyivgen '
23 Feb 2018
b'Brave Software'
disclosed a bug submitted by
b'apapedulimu'
b'Bypassing Homograph Attack Using /@ [ Tested On Windows ]'
23 Feb 2018
b'WordPress'
disclosed a bug submitted by
b'sp1d3rs'
b'Open Redirect on the nl.wordpress.net'
22 Feb 2018
b'Razer US'
disclosed a bug submitted by
b'sp1d3rs'
b'Open redirect on oauth2.razerzone.com caused by server misconfiguration when using triple slash after hostname'
22 Feb 2018
b'VK.com'
disclosed a bug submitted by
b'linkks'
b'Opcode Cache'
22 Feb 2018
b'Node.js third-party modules'
disclosed a bug submitted by
b'orange'
b'Path Traversal on Resolve-Path'
22 Feb 2018
b'LocalTapiola'
disclosed a bug submitted by
b'muon4'
b'Verbose error message reveals internal system hostnames, protols and used ports (yrityspalvelu.tapiola.fi)'
22 Feb 2018
b'RubyGems'
disclosed a bug submitted by
b'ysx'
b'[gem server] Stored XSS via crafted JavaScript URL inclusion in Gemspec'
22 Feb 2018
b'Twitter'
disclosed a bug submitted by
b'omespino'
b'POODLE SSLv3 bug on multiple twitter smtp servers (mx3.twitter.com,199.59.148.204,199.16.156.108 and 199.59.148.204)'
22 Feb 2018
b'Monero'
disclosed a bug submitted by
b'bugbound'
b'remote access to localhost daemon, can issue jsonrpc commands'
22 Feb 2018
b'GitLab'
disclosed a bug submitted by
b'edoverflow'
b'Using GitLab to monitor and hijack domains in mass quantity.'
21 Feb 2018
b'Inflection'
disclosed a bug submitted by
b'exception'
b'Open redirect at app.goodhire.com via ReturnUrl parameter'
21 Feb 2018
b'Inflection'
disclosed a bug submitted by
b'exception'
b'XSS at https://app.goodhire.com/member/GH.aspx'
21 Feb 2018
b'SEMrush'
disclosed a bug submitted by
b'r0p3'
b'Single Sing On - Clickjacking'
21 Feb 2018
b'Mail.Ru'
disclosed a bug submitted by
b'isaeva'
b"filin.mail.ru user's e-mail address disclosure"
21 Feb 2018
b'VK.com'
disclosed a bug submitted by
b'povargek'
b'???????? ?????????? ? ???????? email, ????? ???? ??? ???????????????? ??????-???????????'
20 Feb 2018
1
...
486
487
488
489
490
...
748
BY DENIS WERNER - @NOBBD -
IMPRESSUM