Paragon Initiative Enterprises: Full Path Disclosure

Hi as reported in email, there is a full path disclosure in EasyDB you fixed some of them in last commit add this code before and "execute$params" function call! ifcount$params != count$params,COUNTRECURSIVE throw new \InvalidArgumentException"Invalid params"; this will check $params to be 1d...

Paragon Initiative Enterprises: CSRF AT SUBSCRIBE TO LIST

Hello, You Have Subscribe Form At http://paragonie.us11.list-manage2.com/subscribe?u=260ff2c88e0a7e103f01ccd79&id=8ddb8569ca When We Enter Details And Click on Subscribe. We Get Following Request Just Try to Add Email 'MERGE0' And Pass the Request , Attacker can Also send that Form Request to Bur...

Paragon Initiative Enterprises: Missing SPF for paragonie.com

There is no TXT record in DNS zone that defines Sender Policy Framework entry for domain https://paragonie.com/. This makes it easy to spoof your e-mail address...

Paragon Initiative Enterprises: Missing SPF

There is no TXT record in DNS zone that defines Sender Policy Framework entry for domain paragonie.com. This makes it easy to spoof your e-mail address...

Paragon Initiative Enterprises: Information Disclosure in Error Page

Hello, Here's an crafted URL which discloses web server used and version of same. https://paragonie.com/%PI Even-though most error pages are handled by generic pages in paragonie.com, above given 400 Bad Request sample is not handled. It seems this error page is because of Invalid URL Encoded %PI...

Paragon Initiative Enterprises: Open-redirect on paragonie.com

Hello, I would like to report about open-redirect on paragonie.com Here is the PoC that redirects to URL. For example::https://paragonie.com//google.com/ Regards, HatMast3r...