Security vulnerabilities

Hello,

3.Then go to webmail.alwaysdata.com to put your address and password in which you had submitted in Step 2.

I think you're mistaken, that doesn't work. Please attach a video if you still believe you're right.

Kind regards,
Cyril

I will send you the video sir

Here is a video

   bandicam 2025-09-12 23-29-18-... (8.08 MiB)

You sign up with sojarog998@ishense.com and login to the webmail with oliva@alwaysdata.net. Not the same address. There's no vulnerability here.

Attacker can create an account in admin.alwaysdata.com as a behalf of a victim, he/she uses oliva address to login to webmail.alwaysdata.com to send fake emails to anyone, send phishing mails and redirect victim mail to yourself server, plz have a look

Thank you,

Waleed Anwar

Attacker can use victim email to create an account from alwaysdata marketplace then fill the form to submit the request, I already told you sir Attacker use address not email address bcz its mentiond in marketplace.

Please have a look on it, its a serious matter for users.

Thank you,

Waleed Anwar

Any update?

Any update sir??

I already told you sir put address(not an email address) and then password in webmail.alwaysdata.com

Thank You,

Waleed Anwar

Any update??

Any Update about this report, It is validated or not?