Abusing the mpc hc webui to steal private pictures