鳖频道
Ir al canal en Telegram
来自 @bakabie 的奇妙胡思乱想 BLOG:https://9bie.org 联动频道: @link_to_bunny_channel
Mostrar más1 232
Suscriptores
Sin datos24 horas
+227 días
+3230 días
Archivo de publicaciones
1 232
Repost from Cat Ch.
The injected command chain ultimately reached interpret:// URLs, handled by Support::InterpretSendPath() in support/support_helper.cpp. This was a leftover internal release-publishing helper (used by build/updates.py to post builds to a channel). It parsed a "command file" with directives like channel:, topic:, file:, caption: — and then read the specified local file and sent it to the specified chat with no authorization check and no confirmation prompt.
何接口?什么叫你有个功能能直接点一下自动上传一个本地文件到某个 channel?
https://www.threatwire.tech/research/telegram-desktop-one-click-file-theft-is-cve-2026-107181
