Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication via the h2c upgrade process. An attacker can gain unauthorized access by exploiting improper authentication handling during the HTTP/2 Cleartext upgrade. Remediation Upgrade...

EUVD-2022-7136

Malicious code in bioql PyPI...

Arbitrary File Read

github.com/adguardteam/adguardhome is vulnerable to an Arbitrary File Read. The vulnerability is due to improper validation of user input and inadequate restrictions on file access, allowing authenticated users to manipulate the file system and read sensitive files...

GO-2024-2924 AdGuardHome privilege escalation vulnerability in github.com/AdguardTeam/AdGuardHome

AdGuardHome privilege escalation vulnerability in github.com/AdguardTeam/AdGuardHome. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners...

Privilege Escalation

github.com/adguardteam/adguardhome is vulnerable to Privilege Escalation. The vulnerability is due to unprivileged attackers being able to overwrite the AdGuardHome binary, which allows an attacker to escalate privileges on the host OS...

GHSA-7JP9-VGMQ-C8R5 AdGuardHome privilege escalation vulnerability

An issue in AdGuardHome v0.93 to latest allows unprivileged attackers to escalate privileges via overwriting the AdGuardHome binary...

AdGuardHome privilege escalation vulnerability

An issue in AdGuardHome v0.93 to latest allows unprivileged attackers to escalate privileges via overwriting the AdGuardHome binary...

CVE-2024-36586

An issue in AdGuardHome v0.93 to latest allows unprivileged attackers to escalate privileges via overwriting the AdGuardHome binary...

CVE-2024-36586

An issue in AdGuardHome v0.93 to latest allows unprivileged attackers to escalate privileges via overwriting the AdGuardHome binary...

PT-2024-27083 · Unknown · Adguardhome

Name of the Vulnerable Software and Affected Versions: AdGuardHome versions 0.93 through latest Description: The issue allows unprivileged attackers to escalate privileges via overwriting the AdGuardHome binary. This is a privilege escalation vulnerability in AdGuardHome. Recommendations: For...

AdGuardHome privilege escalation vulnerability

An issue in AdGuardHome v0.93 to latest allows unprivileged attackers to escalate privileges via overwriting the AdGuardHome binary...

AdGuardHome Security Breach

AdGuardHome is AdguardTeam's block DNS servers for network-wide advertising and tracking. A security vulnerability exists in AdGuardHome version v0.93 and later. An attacker exploited the vulnerability to elevate privileges by overwriting the AdGuardHome binary...

CVE-2024-36586

AdGuardHome is affected by a privilege escalation vulnerability (CVE-2024-36586) affecting v0.93 to latest, described as unprivileged attackers escalating privileges by overwriting the AdGuardHome binary. Connected advisories (OSV GO-2024-2924 and GHSA-7JP9-VGMQ-C8R5, Veracode 47547, CNNVD, PT-20...

CVE-2024-36586

An issue in AdGuardHome v0.93 to latest allows unprivileged attackers to escalate privileges via overwriting the AdGuardHome binary...

Cross-site Request Forgery (CSRF)

github.com/AdguardTeam/AdGuardHome is vulnerable to Cross-site Request Forgery CSRF. The vulnerability exists because the custom filtering rules functionality in the setupConfig function of home.go, allows a malicious user to redirect the authorized user to malicious urls and modify the custom...

AdGuardHome vulnerable to Cross-Site Request Forgery

In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery CSRF, in the custom filtering rules functionality. An attacker can persuade an authorized user to follow a malicious link, resulting in deleting/modifying the custom filtering rules. The file that...

GHSA-MWWC-3JV2-62J3 AdGuardHome vulnerable to Cross-Site Request Forgery

In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery CSRF, in the custom filtering rules functionality. An attacker can persuade an authorized user to follow a malicious link, resulting in deleting/modifying the custom filtering rules. The file that...

CVE-2022-32175

In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery CSRF, in the custom filtering rules functionality. An attacker can persuade an authorized user to follow a malicious link, resulting in deleting/modifying the custom filtering rules...

CVE-2022-32175

In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery CSRF, in the custom filtering rules functionality. An attacker can persuade an authorized user to follow a malicious link, resulting in deleting/modifying the custom filtering rules...

Cross site request forgery (csrf)

In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery CSRF, in the custom filtering rules functionality. An attacker can persuade an authorized user to follow a malicious link, resulting in deleting/modifying the custom filtering rules...