V12 (@v12sec)
@v12sec
0 正在关注 0 粉丝
Here's another RCE that works on the "patched" Windows @telegram client.
Even if individual bugs get patched, allowing (unsandboxed!) QuickJS in messages massively opens up the attack surface.
显示更多
Any telegram message can now become RCE
6630b003766baed1fa86cea880d22e41dc416f63d800de3246941ede2396ad48
