Gemini-api-key-hunter

Gemini API 密钥工具包 一个用于发现、验证和测试暴露的 Google Gemini API 密钥的工具包。 它由两个组件组成： Gemisc.py – 一个高速 Python 扫描器，可从网站和 JavaScript 文件中发现暴露的 Google API 密钥，针对 Gemini API 进行验证，并识别每个密钥可访问的服务。 lostsec.html – 一个基于浏览器的 Gemini 客户端，可让你使用发现的 API 密钥直接与 Gemini API 交互。无需后端或服务器。 !IMPORTANT 🎥 该工具包的完整演示视频见此处：...

NextPass

🚀 NextPass プライバシー重視のAIパスワード辞書ジェネレーター。 NextPassは、ルールベースのロジックと大規模言語モデルの両方を使用してパスワードを生成する、特殊なパスワード辞書ジェネレーターです。セキュリティ研究者向けに設計されており、オフライン生成で外出先でもパスワード辞書を生成でき、さらにAIを活用して人間らしいパスワードパターンを予測しながら、ターゲットデータに対する厳格なプライバシーエアギャップを維持します。 🛡️ プライバシー重視のAIアーキテクチャ...

keyguard

keyguard 扫描代码库、GCP 项目和 CI 流水线中暴露的 Google API 凭据——在它们被利用之前。 问题： Google 在已有的 API 密钥（Maps、Places 等）上回溯启用 了 Gemini API 访问，这些密钥本来设计为公开并嵌入客户端代码。当团队中有人在同一个 GCP 项目中启用 Gemini 时，那些本已公开的密钥会悄悄变成 Gemini 凭据——导致项目面临未经授权的 AI 使用风险，并可能产生超过 8 万美元的账单事故（背景）。 keyguard 的功能： keyguard scan —— 使用正则表达式 + 熵检测，在源文件和 Git...

EUVD-2026-47653

A flaw was found in the Ansible Lightspeed extension for Visual Studio Code. This vulnerability allows an attacker with local access to the workstation, or malware running with the user's privileges, to read the Google Gemini API key. The extension insecurely stores the API key in plain text with...

CVE-2026-44187

The CVE-2026-44187 vulnerability affects the Ansible Lightspeed extension for Visual Studio Code. It allows a local attacker or malware operating with the user’s privileges to read the Google Gemini API key because the extension stores the credential in plaintext in the user’s configuration file ...

exploitGuard

Run and deploy your AI Studio app This contains everything yo...

CVE-2026-2589

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 12.8.3 via the automated Settings Backup stored in a publicly accessible file. This makes it possible for unauthenticated attackers to...

EUVD-2024-50703

Malicious code in bioql PyPI...

CVE-2024-12236

A security issue exists in Vertex Gemini API for customers using VPC-SC. By utilizing a custom crafted file URI for image input, data exfiltration is possible due to requests being routed outside the VPC-SC security perimeter, circumventing the intended security restrictions of VPC-SC. No further...

CVE-2024-12236

A security issue exists in Vertex Gemini API for customers using VPC-SC. By utilizing a custom crafted file URI for image input, data exfiltration is possible due to requests being routed outside the VPC-SC security perimeter, circumventing the intended security restrictions of VPC-SC. No further...

CVE-2024-12236 Use of Custom URI for media inputs with VPC-SC enabled potentially leads to data exfiltration

A security issue exists in Vertex Gemini API for customers using VPC-SC. By utilizing a custom crafted file URI for image input, data exfiltration is possible due to requests being routed outside the VPC-SC security perimeter, circumventing the intended security restrictions of VPC-SC. No further...

CVE-2024-12236

Vertex Gemini API leaks data if a crafted fileUri for image input is used with VPC Service Controls, potentially bypassing the VPC-SC perimeter. Google Cloud fixed this by returning an error when a media file URL is specified in the fileUri parameter with VPC-SC enabled; other cases are unaffecte...

CVE-2024-12236 Use of Custom URI for media inputs with VPC-SC enabled potentially leads to data exfiltration

A security issue exists in Vertex Gemini API for customers using VPC-SC. By utilizing a custom crafted file URI for image input, data exfiltration is possible due to requests being routed outside the VPC-SC security perimeter, circumventing the intended security restrictions of VPC-SC. No further...

PT-2024-17503 · Google · Vertex Gemini Api

Name of the Vulnerable Software and Affected Versions: Vertex Gemini API affected versions not specified Description: A security issue exists in the Vertex Gemini API for customers using VPC-SC. By utilizing a custom crafted file URI for image input, data exfiltration is possible due to requests...