Long story short: #Google once said that you could publish this #API #key. Then Google changed the #software and used the key for #billing with #Gemini, its in-house #AI. Of course, there are now many leaked keys and high costs that Google now wants to collect from the owners of the keys. Don't let Google fool you!

see: trufflesecurity.com/blog/googl…

#news #software #money #customer #service #fool #wtf #omg #economy #bigtech #evil #problem #cybersecurity #security #marketing #fail #company #politics #responsibility #bill #cost #leak #apikey

ICE Phishing: Scammers Are Sending 'Support ICE' Emails to Steal Credentials

https://fed.brid.gy/r/https://www.404media.co/ice-phishing-scammers-are-sending-support-ice-emails-to-steal-credentials/

🚨 EUVD-2026-9990

📊 Score: 9.3/10 (CVSS v3.1)
📦 Product: ghostfolio
🏢 Vendor: ghostfolio
📅 Updated: 2026-03-06

📝 Ghostfolio is an open source wealth management software. Prior to version 2.245.0, an attacker can exploit the manual asset import feature to perform a full-read SSRF, allowing them to exfiltrate sensitive cloud metadata (IMDS) or probe internal network ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-9990

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-9995

📊 Score: 9.3/10 (CVSS v3.1)
📦 Product: ghostfolio
🏢 Vendor: ghostfolio
📅 Updated: 2026-03-06

📝 Ghostfolio is an open source wealth management software. Prior to version 2.244.0, by bypassing symbol validation, an attacker can execute arbitrary SQL commands via the getHistorical() method, potentially allowing them to read, modify, or delete sensiti...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-9995

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-9975

📊 Score: 6.5/10 (CVSS v3.1)
📦 Product: chartbrew
🏢 Vendor: chartbrew
📅 Updated: 2026-03-06

📝 Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.1, the application performs authorization checks based solely on the project_id parameter when handling char...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-9975

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-9976

📊 Score: 7.2/10 (CVSS v3.1)
📦 Product: chartbrew
🏢 Vendor: chartbrew
📅 Updated: 2026-03-06

📝 Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.1, there is a remote code execution vulnerability via the MongoDB dataset Query. This issue has been patched...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-9976

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-9977

📊 Score: 8.8/10 (CVSS v3.1)
📦 Product: chartbrew
🏢 Vendor: chartbrew
📅 Updated: 2026-03-06

📝 Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.1, there is a remote code execution vulnerability via a vulnerable API. This issue has been patched in versi...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-9977

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-9978

📊 Score: 8.8/10 (CVSS v3.1)
📦 Product: chartbrew
🏢 Vendor: chartbrew
📅 Updated: 2026-03-06

📝 Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.3, an unauthenticated attacker can inject arbitrary SQL into queries executed against databases connected to...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-9978

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-9979

📊 Score: 8.7/10 (CVSS v3.1)
📦 Product: chartbrew
🏢 Vendor: chartbrew
📅 Updated: 2026-03-06

📝 Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.4, the chart filter endpoint POST /project/:project_id/chart/:chart_id/filter is missing both verifyToken an...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-9979

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-9980

📊 Score: 6.3/10 (CVSS v3.1)
📦 Product: chartbrew
🏢 Vendor: chartbrew
📅 Updated: 2026-03-06

📝 Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.4, the application allows uploading files (project logos) without validating the file type or content. It tr...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-9980

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-9985

📊 Score: 6.3/10 (CVSS v3.1)
📦 Product: LangBot
🏢 Vendor: langbot-app
📅 Updated: 2026-03-06

📝 LangBot is a global IM bot platform designed for LLMs. Prior to version 4.8.7, LangBot’s web UI renders user-supplied raw HTML using rehypeRaw, which can lead to a cross-site scripting (XSS) vulnerability. This issue has been patched in version 4.8.7.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-9985

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-9986

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: OpenSift
🏢 Vendor: OpenSift
📅 Updated: 2026-03-06

📝 OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Prior to version 1.6.3-alpha, some endpoints returned raw exception strings to clients. Additionally, login token material was exposed in UI/rendered resp...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-9986

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-9987

📊 Score: 8.8/10 (CVSS v3.1)
📦 Product: OpenSift
🏢 Vendor: OpenSift
📅 Updated: 2026-03-06

📝 OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Prior to version 1.6.3-alpha, multiple storage helpers used path construction patterns that did not uniformly enforce base-directory containment. This cre...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-9987

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-9988

📊 Score: 8.2/10 (CVSS v3.1)
📦 Product: OpenSift
🏢 Vendor: OpenSift
📅 Updated: 2026-03-06

📝 OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Prior to version 1.6.3-alpha, the URL ingest pipeline accepted user-controlled remote URLs with incomplete destination restrictions. Although private/loca...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-9988

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-9989

📊 Score: 8.6/10 (CVSS v3.1)
📦 Product: home-gallery
🏢 Vendor: xemle
📅 Updated: 2026-03-06

📝 Home-Gallery.org is a self-hosted open-source web gallery to browse personal photos and videos. Prior to version 1.21.0, when a user requests a download, the application does not verify whether the requested file is located within the media source directory...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-9989

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-9982

📊 Score: 7.5/10 (CVSS v3.1)
📦 Product: Talishar
🏢 Vendor: Talishar
📅 Updated: 2026-03-06

📝 Talishar is a fan-made Flesh and Blood project. Prior to commit 6be3871, a Path Traversal vulnerability was identified in the gameName parameter. While the application's primary entry points implement input validation, the ParseGamestate.php component can be...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-9982

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-9981

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: Talishar
🏢 Vendor: Talishar
📅 Updated: 2026-03-06

📝 Talishar is a fan-made Flesh and Blood project. Prior to commit a9c218e, an authentication bypass vulnerability in Talishar's game endpoint validation logic allows any unauthenticated attacker to perform authenticated game actions — including sending chat me...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-9981

#cybersecurity #infosec #euvd #cve #vulnerability

Possible Phishing 🎣
on: ⚠️hxxps[:]//www[.]robiox[.]com[.]py/users/394929485252/profile
🧬 Analysis at: https://urldna.io/scan/69a9c4a93b77500004795bcf
#cybersecurity #phishing #infosec #urldna #scam #infosec

CVE Alert: CVE-2026-28485 - OpenClaw - OpenClaw - https://www.redpacketsecurity.com/cve-alert-cve-2026-28485-openclaw-openclaw/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-28485 #openclaw #

Arc Raiders Discord Flaw: How a Game Accidentally Logged Private Messages

#Gaming #Privacy #Cybersecurity #DiscordIntegration #AusNews

https://thedailyperspective.org/article/2026-03-06-arc-raiders-discord-flaw-how-a-game-accidentally-logged-private-messages-e0e3078a