ROSECURIFY

Posts
Advisories
Seclog

Tags

advisories
seclog
posts
welcome
introduction
security
ssrf
cswsh
vulnerability-disclosure
mailpit
responsible-disclosure

Who am I?

I am Omar, a Security Researcher & Engineer.

Application security, vulnerability research, and responsible disclosure.

Recent Advisories

RO-26-005 - Gakido - CRLF Injection

RO-26-004 - Mailpit - SMTP CRLF Injection via Regex Bypass

RO-26-003 - feedyour.email - SQL Injection via Search Parameter

RO-26-002 - Mailpit - Cross-Site WebSocket Hijacking (CSWSH)

RO-26-001 - Mailpit - Server-Side Request Forgery (SSRF)

All advisories →

Latest Posts

Two CVEs, Zero Ego: A Mailpit Story
What includes in this blog
Hello 1337

ROsecurify — Security research, vulnerability disclosures, and application security insights.

Press / to search, Esc to close