Browse / Paragon Initiative Enterprises

Paragon Initiative Enterprises

See its reports on the map

What gets reported to Paragon Initiative Enterprises

• Misconfiguration18
• Information Disclosure17
• Other weaknesses7
• Authentication7
• Cross-site Scripting6
• Cryptography5

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Recaptcha Secret key LeakedInformativeInformation Disclosure · high
   9 votes
2. Issue with password reset functionality [Minor]InformativeViolation of Secure Design Principles
   6 votes
3. User enumeration via Password reset page [Minor]InformativeViolation of Secure Design Principles
   5 votes
4. Github repo's wiki publicly editableInformativeImproper Access Control - Generic
   4 votes
5. Github wikis are editable by anyone https://github.com/paragonie/password_lock/wikiInformativeImproper Access Control - Generic · medium
   3 votes
6. Not clearing hex-decoded variable after usage in AuthenticationInformativeViolation of Secure Design Principles
   3 votes
7. [URGENT] Password reset emails are sent in clear-text (without encryption)InformativeCryptographic Issues - Generic
   3 votes
8. Email spoofing in [email protected]InformativeMemory Corruption - Generic
   3 votes
9. no session logout after changing the password in https://bridge.cspr.ng/InformativeImproper Authentication - Generic · low
   2 votes
10. Full Path Disclousure on https://airship.paragonie.comInformativeInformation Disclosure · low
    2 votes
11. Improper validation of Email Informative
    2 votes
12. directory information discloseInformativeInformation Disclosure
    2 votes
13. Full Path Disclosure by removing CSRF tokenInformativeInformation Disclosure
    2 votes
14. Session Management Issue CMS AirshipInformativeMemory Corruption - Generic
    2 votes
15. Airship doesn't reject weak passwordsInformativeImproper Authentication - Generic
    2 votes
16. Full path disclosure when CSRF validation failed InformativeInformation Disclosure
    2 votes
17. Nginx Version Disclosure On Forbidden PageInformativeInformation Disclosure
    2 votes
18. Your Application Have Cacheable SSL PagesInformativeViolation of Secure Design Principles
    2 votes
19. Information Disclosure in Error PageInformativeInformation Disclosure
    2 votes
20. There is an vulnerability in https://bridge.cspr.ng where an attacker can users directoryInformativemedium
    1 votes
21. Using plain git protocol (vulnerable to MITM)InformativeCryptographic Issues - Generic
    1 votes
22. Missing GIT tag/commit verification in DockerInformative
    1 votes
23. Full path disclosure vulnerability on paragonie.comInformativeInformation Disclosure
    1 votes
24. The Anti-CSRF Library fails to restrict token to a particular IP address when being behind a reverse-proxy/WAFInformativeCross-Site Request Forgery (CSRF)
    1 votes
25. file full path discloser.InformativeInformation Disclosure
    1 votes
26. DNSsec not configuredInformativeViolation of Secure Design Principles
    1 votes
27. Missing SPF for https://paragonie.com/InformativeViolation of Secure Design Principles
    1 votes
28. Cross-domain AJAX requestInformativeViolation of Secure Design Principles
    1 votes
29. Non-secure requests are not automatically upgraded to HTTPSInformativeViolation of Secure Design Principles · low
30. Full Path Disclosure in airship.paragonie.com '/cabins/'InformativeInformation Disclosure
31. Full Path Disclosure In EasyDBInformativeInformation Disclosure
32. Full Path Disclosure in password lockInformativeInformation Disclosure