Nuin

@nuin.bsky.social

See my SFW Art here! https://cara.app/nuin ๐Ÿ”ž Minors do not interact! I post and repost NSFW/SFW art ๐ŸŽจ 3D artist and hobbyist Bean using Blender since 2019

Update. Will be opening the slots for a bit. If anyone is still interested it's open for next month ๐Ÿฅน Been really busy working on this month's list. I haven't sent the finished ones yet but will do later! Thank youuu so much ๐Ÿซ‚๐Ÿ’ž

tocino || OPEN for comms@cafurccino.bsky.social ยท 10mo ago

๐ŸŒบ๐ŸŒ… Portrait Sketch YCH Hello! I'm currently open for 2026 commission. I updated my Ko-fi and samples are in the link so please feel free to check it out if you can! ๏ฝกหšโ—‹ You can order it here: ko-fi.com/c/b0bb816d58 Thank you for sharing! I really appreciate the overwhelming support ๐Ÿ’•

Okay a tiny thread because people are going to freak out: This exploit in particular takes advantage of a special command that renders images (via attribute escape). If you have an overlay that processes images (most don't) then yes, this is your problem. Overlay must explicitly create img DOM.

A picture of the exploit, using a command that explicitly includes an image file extension, but also would escape out of the src attribute of an image such than an onerror attribute can be added to the img tag. This onerror attribute can run explicit javascript immediately.

Default behavior for most chat widgets is if you have an image it will not attempt to modify image links into actual HTML image tags. Your overlay/overlay service must explicitly be doing this for you.

ๅทฅ๐“‰'๐“ˆ ๐‘”๐‘’๐“‰๐“‰๐’พ๐“ƒ๐‘” ๐’ธ๐’ฝ๐’พ๐“๐“๐“Ž ๐‘œ๐“Š๐“‰๐“ˆ๐’พ๐’น๐‘’... เผ„ห–ยฐ.๐Ÿ‚.เณƒเฟ”*:๏ฝฅ ๐Ÿ‚หš เผ˜ เณ€โ‹†๏ฝกหšโ˜•๏ธหš เผ˜ เณ€โ‹†๏ฝกหš ๐“ˆ๐’ฝ๐’ถ๐“‡๐‘’ ๐’ถ ๐’ธ๐“Š๐“… ๐‘œ๐’ป ๐“‰๐‘’๐’ถ ๐“Œ๐’พ๐“‰๐’ฝ ๐“‚๐‘’?

๐ŸฑWelp, Discord is down, I don't know if this is related to the Discord Ban in our country but I'll figure out things in upcoming days. You can also contact me on Telegram or here on Bsky in case.

Bild

Haven't posted much in a good few months but I just had to share this commission I got from @himmis.bsky.social All in all, life has been keeping me busy and away from socials for the most part, got a holiday in a few weeks which I've been desperately needing, thank you all for keeping tabs on me ๐Ÿ’›

Bild