Tagged "responsible-disclosure" · Rosecurify

ROSECURIFY

Posts
Advisories
Seclog

Two CVEs, Zero Ego: A Mailpit Story 10 Jan 2026

Who am I?

I am Omar, a Security Researcher & Engineer.

Application security, vulnerability research, and responsible disclosure.

Recent Advisories

RO-26-005 - Gakido - CRLF Injection

RO-26-004 - Mailpit - SMTP CRLF Injection via Regex Bypass

RO-26-003 - feedyour.email - SQL Injection via Search Parameter

RO-26-002 - Mailpit - Cross-Site WebSocket Hijacking (CSWSH)

RO-26-001 - Mailpit - Server-Side Request Forgery (SSRF)

All advisories →

Latest Posts

Two CVEs, Zero Ego: A Mailpit Story
What includes in this blog
Hello 1337

ROsecurify — Security research, vulnerability disclosures, and application security insights.

Press / to search, Esc to close