corpus.blog
42,923 blogs · 5,350,595 posts Claim your blog
Record · corpus.blog/posts/01a08790-9c56-725e-b977-036cccf08931

Roundcube XSS chained with cookie tossing for full inbox access

aikido.dev · published 21 April 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at aikido.dev Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
17
Words captured
2,274

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://www.aikido.dev/attack/aipentest
aikido.dev
https://hackerone.com/reports/3594137
hackerone.com
https://github.com/roundcube/roundcubemail/blob/13fe3a616c6e451d2ab24a056c25ffd648bd02a1/program/actions/mail/get.php
github.com
https://github.com/roundcube/roundcubemail/blob/226811a1c974271dbedca72672923abaff8191c0/program/lib/Roundcube/rcube_uploads.php
github.com
https://github.com/roundcube/roundcubemail/blob/master/program/actions/mail/attachment_upload.php
github.com
Multiple XSS Vulnerabilities in Mailcow Read at the source ↗
aikido.dev
https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Set-Cookie
developer.mozilla.org
https://github.blog/engineering/yummy-cookies-across-domains/
github.blog
https://developer.mozilla.org/en-US/docs/Web/API/Document/cookie
developer.mozilla.org
https://github.com/roundcube/roundcubemail/releases/tag/1.6.14
github.com
https://github.com/roundcube/roundcubemail/releases/tag/1.5.14
github.com
https://app.aikido.dev/?_gl=1*11lkpus*_gcl_au*MTc3OTE5NTY0LjE3NzYzMjk2MzQ.
app.aikido.dev
https://www.aikido.dev/platform/attack
aikido.dev
https://github.com/roundcube/roundcubemail/commit/1b30edf5369668c92fe91dae3d52e477c808aa4f
github.com
https://github.com/roundcube/roundcubemail/blob/830ab574b38ea63f3c8f7a66b62343c8005bd7a0/program/lib/Roundcube/rcube_imap_generic.php
github.com
http://mail.target.tld/?_task=mail&_action=search&_interval=&_q=imap-inject-test&_headers=subject%2Cfrom&_layout=widescreen&_filter=ALL%0D%0AX007%20CREATE%20EvilFolder&_scope=base&_mbox=INBOX&_remote=1
mail.target.tld
https://github.com/roundcube/roundcubemail/commit/b18a8fa8e81571914c0ff55d4e20edb459c6952c
github.com