鳖频道
Kanalga Telegram’da o‘tish
来自 @bakabie 的奇妙胡思乱想 BLOG:https://9bie.org 联动频道: @link_to_bunny_channel
Ko'proq ko'rsatish1 232
Obunachilar
Ma'lumot yo'q24 soatlar
+227 kun
+3230 kun
Postlar arxiv
1 232
Repost from Cat Ch.
The injected command chain ultimately reached interpret:// URLs, handled by Support::InterpretSendPath() in support/support_helper.cpp. This was a leftover internal release-publishing helper (used by build/updates.py to post builds to a channel). It parsed a "command file" with directives like channel:, topic:, file:, caption: — and then read the specified local file and sent it to the specified chat with no authorization check and no confirmation prompt.
何接口?什么叫你有个功能能直接点一下自动上传一个本地文件到某个 channel?
https://www.threatwire.tech/research/telegram-desktop-one-click-file-theft-is-cve-2026-107181
