REPORTS
PROGRAMS
PUBLISHERS
Top10 publishers:
b'bobrov'
117
b'sp1d3rs'
86
b'geeknik'
83
b'linkks'
75
b'jobert'
70
b'nyymi'
62
b'someonenobbd'
62
b'ooooooo_q'
54
b'guido'
50
b'haxta4ok00'
49
Now on Twitter
the unofficial
HackerOne
disclosure timeline.
X
b'HackerOne'
disclosed a bug submitted by
b'wh47'
b'Content Security Policy not applied to error pages at multiple HackerOne endpoints'
12 Dec 2017
b'WordPress'
disclosed a bug submitted by
b'morningstar'
b'Stored xss via template injection'
11 Dec 2017
b'Infogram'
disclosed a bug submitted by
b'muon4'
b'New team invitation functionality allows extend team without upgrade'
11 Dec 2017
b'Ubiquiti Networks'
disclosed a bug submitted by
b'dblack'
b'Command injection in the process of downloading the latest version of the cloud key firmware through the unifi management software.'
11 Dec 2017
b'Perl (IBB)'
disclosed a bug submitted by
b'mipu94'
b'Interger overflow in eval trigger write out of bound'
11 Dec 2017
b'Infogram'
disclosed a bug submitted by
b'mksecurity'
b'Report Design Critical Stored DOM XSS Vulnerability '
08 Dec 2017
b'New Relic'
disclosed a bug submitted by
b'jon_bottarini'
b'Bypass of my two other reports #267636 + #255894 - (IDOR) Ability to see full name associated with other New Relic accounts'
07 Dec 2017
b'HackerOne'
disclosed a bug submitted by
b'cjlegacion'
b'Able To Check The Exact Bounty Balance of any Bug Bounty Program'
06 Dec 2017
b'Trello'
disclosed a bug submitted by
b'nohack'
b'Sessions Token In Get Parameter Request Initiating Websocket Connection'
06 Dec 2017
b'Infogram'
disclosed a bug submitted by
b'mrreboot'
b'Server Side Request Forgery on JSON Feed'
06 Dec 2017
b'Monero'
disclosed a bug submitted by
b'aerodudrizzt'
b'Kovri: potential buffer over-read in garlic clove handling + I2NP message creation'
05 Dec 2017
b'Starbucks'
disclosed a bug submitted by
b'benoculars'
b'Multiple Subdomain takeovers via unclaimed instances'
04 Dec 2017
b'Infogram'
disclosed a bug submitted by
b'sp1d3rs'
b'Stored Cross-Site scripting in the infographics using Data Objects links'
04 Dec 2017
b'Infogram'
disclosed a bug submitted by
b'sp1d3rs'
b'Stored Cross-Site scripting in the infographics using links'
04 Dec 2017
b'Ubiquiti Networks'
disclosed a bug submitted by
b'hacknroll'
b'Privilege Escalation with Session Hijacking Having a Non-privileged Valid User'
04 Dec 2017
b'Mail.Ru'
disclosed a bug submitted by
b'linkks'
b'Monitor'
04 Dec 2017
b'WordPress'
disclosed a bug submitted by
b'hackerwahab'
b'Content Spoofing @ https://irclogs.wordpress.org/'
04 Dec 2017
b'Tor'
disclosed a bug submitted by
b'qab'
b'XSS on about:tbupdate'
03 Dec 2017
b'HackerOne'
disclosed a bug submitted by
b'shailesh4594'
b'Invalid Host detection at https://hackerone.com/redirect'
03 Dec 2017
b'Instacart'
disclosed a bug submitted by
b'003random'
b'Get all instacart emails - missing rate limit on /accounts/register'
01 Dec 2017
1
...
488
489
490
491
492
...
738
BY DENIS WERNER - @NOBBD -
IMPRESSUM