kali-arm

Scripts de compilación de Kali-ARM Scripts de compilación ARM de Kali Linux. Estos son los mismos scripts de compilación que usamos para generar las imágenes ARM oficiales pregeneradas de Kali Linux, disponibles aquí: https://www.kali.org/get-kali/ Hay scripts adicionales incluidos en este...

REpsych

REpsych : Psychological Warfare in Reverse Engineering github.com/xoreaxeaxeax/repsych // domas // @xoreaxeaxeax Overview The REpsych toolset is a proof-of-concept illustrating the generation of images through a program's control flow graph CFG. A typical function's CFG| A REpsych generated CFG...

REpsych

REpsych : Guerra psicológica en la ingeniería inversa github.com/xoreaxeaxeax/repsych // domas // @xoreaxeaxeax Resumen El conjunto de herramientas REpsych es una prueba de concepto que ilustra la generación de imágenes a través del grafo de control de flujo CFG de un programa. CFG de una función...

Linux Distros Unpatched Vulnerability : CVE-2026-102583

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Moodle. An incorrect capability check in the artificial intelligence AI editor placement's image generation web service allows an...

MMSkillRisk

MMSkillRisk Código y datos de benchmark para MMSkillRisk: Can Agents Stay Safe When Multimodal Skills Become Traps? MMSkillRisk evalúa si los agentes pueden completar tareas visuales legítimas mientras resisten instrucciones maliciosas incrustadas en habilidades multimodales. Su Native-Context...

CVE-2026-102583

A flaw was found in Moodle. An incorrect capability check in the artificial intelligence AI editor placement's image generation web service allows an authenticated user to invoke the feature without holding the required capability. This flaw permits unauthorized users to access and utilize the AI...

CVE-2026-102583 Moodle: incorrect capability check in ai generate image web service

A flaw was found in Moodle. An incorrect capability check in the artificial intelligence AI editor placement's image generation web service allows an authenticated user to invoke the feature without holding the required capability. This flaw permits unauthorized users to access and utilize the AI...

EUVD-2026-89722

A flaw was found in Moodle. An incorrect capability check in the artificial intelligence AI editor placement's image generation web service allows an authenticated user to invoke the feature without holding the required capability. This flaw permits unauthorized users to access and utilize the AI...

CVE-2026-102583 Moodle: incorrect capability check in ai generate image web service

A flaw was found in Moodle. An incorrect capability check in the artificial intelligence AI editor placement's image generation web service allows an authenticated user to invoke the feature without holding the required capability. This flaw permits unauthorized users to access and utilize the AI...

CVE-2026-102583

A flaw was found in Moodle. An incorrect capability check in the artificial intelligence AI editor placement's image generation web service allows an authenticated user to invoke the feature without holding the required capability. This flaw permits unauthorized users to access and utilize the AI...

Anti-Tamper-Perturbation

🛡️ Protección Anti-Manipulación para la Generación no Autorizada de Imágenes Individuales Código Oficial para el Artículo de ICCV 2025 📄 Protección Anti-Manipulación para la Generación no Autorizada de Imágenes Individuales ⚙️ Configuración del Entorno conda create --name ATP --file...

ANT-2026-6YNNSAA0 · supabase/supabase · other

other low Severity Claude low · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-6YNNSAA0: Image-generation function fetches arbitrary caller URL with service-role in scope The...

CVE-2025-31114 Fooocus webui vulnerable to Remote Code Execution

Fooocus is an image generating software. In versions 2.5.5 and prior, the Fooocus web UI is vulnerable to remote code execution due to the unsafe use of eval when processing metadata JSON. An attacker with access to the Fooocus web UI may be able to execute arbitrary code on the instance. As of...

PYSEC-2026-3646 Open WebUI: Users denied the image-generation permission can still generate images via chat completions

Summary An authenticated user whose features.imagegeneration permission has been revoked can still make the server generate images by sending the feature flag in a chat-completion request. The chat pipeline took the client-supplied features object at face value and never re-checked the permission...

Open WebUI: Users denied the image-generation permission can still generate images via chat completions

SummaryAn authenticated user whose features.imagegeneration permission has been revoked can still make the server generate images by sending the feature flag in a chat-completion request. The chat pipeline took the client-supplied features object at face value and never re-checked the permission...

CVE-2026-19365

A vulnerability was identified in Ichigo3766 image-gen-mcp 0.1.0. The impacted element is an unknown function of the file src/index.ts of the component upscaleimages. Such manipulation of the argument outputpath leads to path traversal. The attack must be carried out locally. The project was...

CVE-2026-19365

A vulnerability was identified in Ichigo3766 image-gen-mcp 0.1.0. The impacted element is an unknown function of the file src/index.ts of the component upscaleimages. Such manipulation of the argument outputpath leads to path traversal. The attack must be carried out locally. The project was...

CVE-2026-19365 Ichigo3766 image-gen-mcp upscale_images index.ts path traversal

A vulnerability was identified in Ichigo3766 image-gen-mcp 0.1.0. The impacted element is an unknown function of the file src/index.ts of the component upscaleimages. Such manipulation of the argument outputpath leads to path traversal. The attack must be carried out locally. The project was...

CVE-2026-19365

CVE-2026-19365 affects Ichigo3766 image-gen-mcp 0.1.0; vulnerable component: upscale_images/src/index.ts – an unknown function where output_path can be manipulated to cause path traversal. Attack is local; no public exploit details in provided documents. The project was notified via an issue but ...

CVE-2026-70484

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 until 0.11.0, the legacy chat-completions features block trusted a client-supplied imagegeneration flag and did not re-check the features.imagegeneration permission that the direct image routes and...