Tagged "mailpit" · Rosecurify

ROSECURIFY

Posts Advisories Seclog

Two CVEs, Zero Ego: A Mailpit Story 10 Jan 2026

FRESH DROP Seclog #198 →

who am i?

I am Omar, a Security Researcher & Engineer.

Application security, vulnerability research, and responsible disclosure.

recent advisories

RO-26-005Gakido - CRLF Injection RO-26-004Mailpit - SMTP CRLF Injection via Regex Bypass RO-26-003feedyour.email - SQL Injection via Search Parameter RO-26-002Mailpit - Cross-Site WebSocket Hijacking (CSWSH) RO-26-001Mailpit - Server-Side Request Forgery (SSRF) All 54 advisories →

ROsecurify — Security research, vulnerability disclosures, and application security insights.

Press / to search, Esc to close