Blacklist3r

Blacklist3r 本项目的目标是收集与各种Web框架相关的密钥/机密材料，这些密钥是公开可用的且可能被开发者使用。这些机密将被Blacklist3r工具用于审计目标应用程序，并验证是否使用了这些预先公开的密钥。 我们发布了此项目及.Net machine key工具，用于识别应用程序中预共享机器密钥的使用情况，这些密钥用于加密和解密表单身份验证cookie。 注意：需要Visual Studio 2019，而非2022。Visual Studio 2022不支持此仓库所依赖的.NET Framework 4.5。 参考： Project Blacklist3r...

psc

PortShellCrypter -- PSC This project - as well as its sister project crash - belongs to my anti-censorship tool-set that allows to setup fully working encrypted shells and TCP/UDP forwarding in hostile censoring environments. It is also useful for forensics to dump data from devices via UART or...

CVE-2026-14443

Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permit extension switch pre-shared keys to be written to system logs. Individuals with read access to container logs or support archives can obtain these keys, leading to the potential...

CVE-2026-82372

Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.1a results in pre-shared keys being recorded in application logs. Individuals with read access to system log files or support bundles can view these credentials, leading to the...

CVE-2026-14443 Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav before 3.0.1a

Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permit extension switch pre-shared keys to be written to system logs. Individuals with read access to container logs or support archives can obtain these keys, leading to the potential...

EUVD-2026-86457

Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permit extension switch pre-shared keys to be written to system logs. Individuals with read access to container logs or support archives can obtain these keys, leading to the potential...

CVE-2026-14443

Brocade SANnav versions before 3.0.1a are vulnerable to incomplete log sanitization during bulk IPsec policy collection. This flaw allows extension switch pre-shared keys to be written to system logs. Attackers with read access to container logs or support archives can retrieve these keys, potent...

CVE-2026-14443 Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav before 3.0.1a

Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permit extension switch pre-shared keys to be written to system logs. Individuals with read access to container logs or support archives can obtain these keys, leading to the potential...

CVE-2026-82372 Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav before 3.0.1.a

Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.1a results in pre-shared keys being recorded in application logs. Individuals with read access to system log files or support bundles can view these credentials, leading to the...

CVE-2026-82372

Brocade SANnav versions prior to 3.0.1a are vulnerable to improper handling of sensitive data during IPsec policy creation and modification. This flaw causes pre-shared keys to be recorded in application logs, potentially exposing credentials used to secure network tunnels to individuals with rea...

EUVD-2026-86408

Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.1a results in pre-shared keys being recorded in application logs. Individuals with read access to system log files or support bundles can view these credentials, leading to the...

CVE-2026-82372 Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav before 3.0.1.a

Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.1a results in pre-shared keys being recorded in application logs. Individuals with read access to system log files or support bundles can view these credentials, leading to the...

PT-2026-98274

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 3.0.1a Description Incomplete log sanitization during bulk IPsec policy collection allows extension switch pre-shared keys to be written to system logs. Users with read access to container logs or support...

PT-2026-98254

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 3.0.1a Description Improper handling of sensitive data during the creation and modification of IPsec policies causes pre-shared keys to be recorded in application logs. Users with read access to system log file...

CVE-2026-14443: Insertion of Sensitive Information into Log File

Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permit extension switch pre-shared keys to be written to system logs. Individuals with read access to container logs or support archives can obtain these keys, leading to the potential...

CVE-2026-82372: Insertion of Sensitive Information into Log File

Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.1a results in pre-shared keys being recorded in application logs. Individuals with read access to system log files or support bundles can view these credentials, leading to the...

Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav

Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permit extension switch pre-shared keys to be written to system logs. Individuals with read access to container logs or support archives can obtain these keys, leading to the potential...

Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav

Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.1a results in pre-shared keys being recorded in application logs. Individuals with read access to system log files or support bundles can view these credentials, leading to the...

Medium: golang

Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...

Amazon Linux 2023 : credentials-fetcher (ALAS2023-2026-1975)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1975 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /...