Aggregator

赛博偶像速成指南（三）- Midjourney

LoRexxar's Blog
1 year 9 months ago

之前的几篇关于AI生成图片的文章讲的都是stable diffusion，虽然SD出现的更早而且开源免费，但其实在设计圈使用更广泛的是Midjourney，Midjourney最大的优点就是使用的便利性，任何一个不懂技术的设计都可以通Midjourney来快速完成设计，而且Midjourney的底层基础模型成熟度相当高，生成的图质量都很高。

LoRexxar

Plugin Vulnerabilities: Visit a Website and Have Your Source Code Stolen

Embrace The Red
1 year 9 months ago
OpenAI continues to add plugins with security vulnerabilities to their store. In particular powerful plugins that can impersonate a user are not getting the required security scrutiny, or a general mitigation at the platform level. As a brief reminder, one of the challenges Large Language Model (LLM) User-Agents, like ChatGPT, and plugins face is the Confused Deputy Problem / Plugin Request Forgery Attacks, which means that during a Prompt Injection attack an adversary can issue commands to plugins to cause harm.

MOVEit Transfer Critical Privilege Escalation Vulnerability

X-Force Exchange - Collection Feed
1 year 9 months ago
Summary Progress, the vendor that provides MOVEit, has disclosed a new, critical vulnerability in its MOVEit file transfer program. Threat Type Vulnerability Overview ***UPDATE #1 - June 19, 2023*** Progress has released an update to their original advisory. The vulnerability has been assigned CVE-2023-35708 and a patch has been made available. See the updated advisory here for additional information. Original Post A new privilege escalation and unauthorized access vulnerability in Progress’ MOVEit Tran

Managed ad