鳖频道
رفتن به کانال در Telegram
来自 @bakabie 的奇妙胡思乱想 BLOG:https://9bie.org 联动频道: @link_to_bunny_channel
نمایش بیشتر1 232
مشترکین
اطلاعاتی وجود ندارد24 ساعت
+227 روز
+3230 روز
آرشیو پست ها
1 232
Repost from Cat Ch.
The injected command chain ultimately reached interpret:// URLs, handled by Support::InterpretSendPath() in support/support_helper.cpp. This was a leftover internal release-publishing helper (used by build/updates.py to post builds to a channel). It parsed a "command file" with directives like channel:, topic:, file:, caption: — and then read the specified local file and sent it to the specified chat with no authorization check and no confirmation prompt.
何接口?什么叫你有个功能能直接点一下自动上传一个本地文件到某个 channel?
https://www.threatwire.tech/research/telegram-desktop-one-click-file-theft-is-cve-2026-107181
