Re: Security Vulnerability : [Immediate Action Required]

--000000000000b0b7970630c198a7
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hello Mishal,

We already asked you 2 days ago to report issues only to the correct
address, instead of emailing so many ASF addresses, some of which are
mailinglists. If you do this again we will permanently ban you from our
email servers.


Kind regards,

Arnout Engelen
ASF Security

On Wed, Mar 19, 2025 at 7:19=E2=80=AFPM Mishal Khan <[email protected]=
om>
wrote:

> Hi Team,
>
> I am an Independent Security Researcher running a vulnerability
> identification service , and I accidentally found some vulnerabilities in
> your infrastructure. which can cause damage to your website and halt your
> business operations.
>
> To avoid any type of doubt or any type of scam I have created a report
> regarding the vulnerability which includes POC, screenshots, and suggeste=
d
> solutions so tell me can I report here ? Is there any appreciation reward
> for a valid report/bug ?
>
> I'm willing to work with you as a team and hopefully we will be working
> together as well!
>
> Kindly respond as soon as possible :)
>
> Regards,
> Mishal khan
>

--000000000000b0b7970630c198a7
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Hello <span class=3D"gmail-il">Mishal</span>,</div><d=
iv><br></div><div>We already asked you 2 days ago to report issues only to =
the correct address, instead of emailing so many ASF addresses, some of whi=
ch are=20
mailinglists. If you do this again we will permanently ban you from our ema=
il servers.</div><div><br></div><div><br></div><div>Kind regards,</div><div=
><br></div><div>Arnout Engelen</div><div>ASF Security</div></div><br><div c=
lass=3D"gmail_quote gmail_quote_container"><div dir=3D"ltr" class=3D"gmail_=
attr">On Wed, Mar 19, 2025 at 7:19=E2=80=AFPM Mishal Khan &lt;<a href=3D"ma=
ilto:[email protected]">[email protected]</a>&gt; wrote:<br><=
/div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;bo=
rder-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr"><di=
v dir=3D"ltr"><span style=3D"font-size:13px;color:rgb(0,0,0);font-family:&q=
uot;Open Sans&quot;,helvetica,arial,sans-serif">Hi Team,</span><br style=3D=
"font-size:13px;color:rgb(0,0,0);font-family:&quot;Open Sans&quot;,helvetic=
a,arial,sans-serif"><br style=3D"font-size:13px;color:rgb(0,0,0);font-famil=
y:&quot;Open Sans&quot;,helvetica,arial,sans-serif"><span style=3D"font-siz=
e:13px;color:rgb(0,0,0);font-family:&quot;Open Sans&quot;,helvetica,arial,s=
ans-serif">I am an Independent Security Researcher running a vulnerability =
identification service , and I accidentally found some vulnerabilities in y=
our infrastructure. which can cause damage to your website and halt your bu=
siness operations.</span><br style=3D"font-size:13px;color:rgb(0,0,0);font-=
family:&quot;Open Sans&quot;,helvetica,arial,sans-serif"><br style=3D"font-=
size:13px;color:rgb(0,0,0);font-family:&quot;Open Sans&quot;,helvetica,aria=
l,sans-serif"><span style=3D"font-size:13px;color:rgb(0,0,0);font-family:&q=
uot;Open Sans&quot;,helvetica,arial,sans-serif">To avoid any type of doubt =
or any type of scam I have created a report regarding the vulnerability whi=
ch includes POC, screenshots, and suggested solutions so tell me can I repo=
rt here ? Is there any appreciation reward for a valid report/bug ?</span><=
br style=3D"font-size:13px;color:rgb(0,0,0);font-family:&quot;Open Sans&quo=
t;,helvetica,arial,sans-serif"><br style=3D"font-size:13px;color:rgb(0,0,0)=
;font-family:&quot;Open Sans&quot;,helvetica,arial,sans-serif"><span style=
=3D"font-size:13px;color:rgb(0,0,0);font-family:&quot;Open Sans&quot;,helve=
tica,arial,sans-serif">I&#39;m willing to work with you as a team and hopef=
ully we will be working together as well!</span><br style=3D"font-size:13px=
;color:rgb(0,0,0);font-family:&quot;Open Sans&quot;,helvetica,arial,sans-se=
rif"><br style=3D"font-size:13px;color:rgb(0,0,0);font-family:&quot;Open Sa=
ns&quot;,helvetica,arial,sans-serif"><span style=3D"font-size:13px;color:rg=
b(0,0,0);font-family:&quot;Open Sans&quot;,helvetica,arial,sans-serif">Kind=
ly respond as soon as possible :)</span><br style=3D"font-size:13px;color:r=
gb(0,0,0);font-family:&quot;Open Sans&quot;,helvetica,arial,sans-serif"><br=
 style=3D"font-size:13px;color:rgb(0,0,0);font-family:&quot;Open Sans&quot;=
,helvetica,arial,sans-serif"><span style=3D"font-size:13px;color:rgb(0,0,0)=
;font-family:&quot;Open Sans&quot;,helvetica,arial,sans-serif">Regards,</sp=
an><br style=3D"font-size:13px;color:rgb(0,0,0);font-family:&quot;Open Sans=
&quot;,helvetica,arial,sans-serif"><span style=3D"font-size:13px;color:rgb(=
0,0,0);font-family:&quot;Open Sans&quot;,helvetica,arial,sans-serif">Mishal=
 khan</span></div>
</div>
</blockquote></div>

--000000000000b0b7970630c198a7--