Paragon Initiative Enterprises: Email Authentication Bypass

Hi, I was able to bypass you email authentication. You have not published "DMARC Domain-based Message Authentication, Reporting, and Conformance" for the domain paragonie.com more information :- http://dmarc.org/ ---------------------------------------------------------------------- what is DMARC...

bitaccess: Missing SPF for hackerone.com

SPF was not correctly set on domains...

Paragon Initiative Enterprises: Vunerability : spf

Heĺlo sir, im an independent security researcher. I found an vunerability in your website Your website https://github.com/paragonie doesn't have valid spf records. To recover this do validate your spf. Sender Policy Framework SPF: This allows you specify which mail servers are allowed to send mai...

New Relic: Too many included lookups

Your SPF record required more than 10 DNS Lookups to be performed during the test. The number of "include" mechanisms and chained "redirect' modifiers should be kept to a minimum. According to RFC 4408, 'SPF implementations MUST limit the number of mechanisms and modifiers that do DNS Lookups to ...

Veris: Security Vulnerability - SMTP protection not used

Hi, I'm checking your website found SPF record there. You should apply strict SMPT policy to stop spoofed email sending from your domain. An attacker would send a Fake email from [email protected] saying that Please change your password, The victim is aware of phishing attacks, But when he sees...

LeaseWeb: MISSING SPF RECORDS & MISSING DKIM POLICY

Missing SPF Records and DKIM policy ----------------------------------------------------- At this moment the leaseweb.com domain is missing the appropriate SPF records and DKIM policy. We are aware of the attack scenarios and currently working on a solution. We will add the missing SPF records an...

Gratipay: SPF/DKIM/DMARC for aspen.io

1.aspen.io 2.grtp.co SPF record lookup and validation for: grtp.co SPF records are published in DNS as TXT records. The TXT records found for your domain are: Checking to see if there is a valid SPF record. No valid SPF record found of either type TXT or type SPF. SPF record lookup and validation...

Gratipay: SPF/DKIM/DMARC for grtp.co

Hello Security Team, I Was Checking The SPF Record For https://grtp.co/ at http://www.kitterman.com/spf/validate.html No valid SPF record found of either type TXT or type SPF. Kindly Fix it Asap! Thanks!...

Gratipay: Email Forgery through Mandrillapp SPF

Description :- The SPF record of gratipay.com include Mandrillapp which you are not using right now, i'm able to add gratipay.com in my account, although a further verification of domain is required but you should know that Mandrillapp allow to send email from a domain if its SPF records point...

Gratipay: No Valid SPF Records.

SPF record lookup and validation for: gratipay.com SPF records are published in DNS as TXT records. The TXT records found for your domain are: ALIAS for nara-9076.herokussl.com Checking to see if there is a valid SPF record. No valid SPF record found of either type TXT or type SPF. Check...

Paragon Initiative Enterprises: Spf

Vulnerability: spf record Vulnerability domine:https://github.com/paragonie No valid spf record onhttps://github.com/paragonie...

Legal Robot: SPF Issue

Researcher found that the root SPF record was configured without include subdomains keyword, and no subdomain SPF record existed...

Paragon Initiative Enterprises: Missing SPF for paragonie.com

There is no TXT record in DNS zone that defines Sender Policy Framework entry for domain https://paragonie.com/. This makes it easy to spoof your e-mail address...

Gratipay: SPF DNS Record

DNS Type SPF use has been removed in the standards track version of SPF, RFC 7208. These records should be removed. POC http://www.kitterman.com/getspf2.py Thanks!...

Paragon Initiative Enterprises: Email Authentication bypass Vulnerability

Hi, I was able to bypass you email authentication. You have not published "DMARC Domain-based Message Authentication, Reporting, and Conformance" for the domain paragonie.com more information :- http://dmarc.org/ ---------------------------------------------------------------------- what is DMARC...

Cisco Email Security Appliance Multiple Vulnerabilities

According to its self-reported version, the Cisco AsyncOS running on the remote Cisco Email Security ESA appliance is affected by the following vulnerabilities : - An anti-spam bypass vulnerability exists in the anti-spam scanner due to improper handling of malformed packets. An unauthenticated,...

Cisco Email Security Appliance Anti-Spam Scanner Bypass Vulnerability

Cisco Email Security Appliance contains a vulnerability that could allow an unauthenticated, remote attacker to bypass security restrictions. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Google Moving Gmail to Strict DMARC Implementation

By next summer, most of the major Web-based email providers will have implemented a policy of strictly adopting the DMARC protocol. Google, in a statement published Tuesday by DMARC.org, said it will move gmail.com to a policy of rejecting any messages that don’t pass the authentication checks...

Gratipay: SPF Protection not used, I can hijack your email server

Description Companies like Twiter,Facebook and even Hackerone implemented a strict email security policy combining SPF, DKIM, and DMARC but I don't see that from gratipay You should apply strict SMPT policy to stop spoofed email sending from your domain. POC is attached. Exploit scenario: An...

Coinbase: SPF records not found

There is no TXT record in DNS zone that defines Sender Policy Framework entry for domain api.coinbase.com. These are the best practices and need to be configure in DNS records to protect your mail servers. using SPF records will help in spam filtering as SPF records does helps in verifying the...