AdGuardHome 路径遍历漏洞

AdGuardHome is a DNS blocking service developed by the AdguardTeam. It prevents advertisements and trackers from reaching users across the network. AdGuardHome has a path traversal vulnerability, which stems from authentication bypass. This vulnerability allows unauthenticated attackers to obtain...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication via the h2c upgrade process. An attacker can gain unauthorized access by exploiting improper authentication handling during the HTTP/2 Cleartext upgrade. Remediation Upgrade...

EUVD-2022-7136

Malicious code in bioql PyPI...

Arbitrary File Read

github.com/adguardteam/adguardhome is vulnerable to an Arbitrary File Read. The vulnerability is due to improper validation of user input and inadequate restrictions on file access, allowing authenticated users to manipulate the file system and read sensitive files...

GO-2024-2924 AdGuardHome privilege escalation vulnerability in github.com/AdguardTeam/AdGuardHome

AdGuardHome privilege escalation vulnerability in github.com/AdguardTeam/AdGuardHome. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners...

Privilege Escalation

github.com/adguardteam/adguardhome is vulnerable to Privilege Escalation. The vulnerability is due to unprivileged attackers being able to overwrite the AdGuardHome binary, which allows an attacker to escalate privileges on the host OS...

GHSA-7JP9-VGMQ-C8R5 AdGuardHome privilege escalation vulnerability

An issue in AdGuardHome v0.93 to latest allows unprivileged attackers to escalate privileges via overwriting the AdGuardHome binary...

AdGuardHome privilege escalation vulnerability

An issue in AdGuardHome v0.93 to latest allows unprivileged attackers to escalate privileges via overwriting the AdGuardHome binary...

CVE-2024-36586

An issue in AdGuardHome v0.93 to latest allows unprivileged attackers to escalate privileges via overwriting the AdGuardHome binary...

CVE-2024-36586: Improper Privilege Management

An issue in AdGuardHome v0.93 to latest allows unprivileged attackers to escalate privileges via overwriting the AdGuardHome binary...

CVE-2024-36586

An issue in AdGuardHome v0.93 to latest allows unprivileged attackers to escalate privileges via overwriting the AdGuardHome binary...

AdGuardHome Security Breach

AdGuardHome is AdguardTeam's block DNS servers for network-wide advertising and tracking. A security vulnerability exists in AdGuardHome version v0.93 and later. An attacker exploited the vulnerability to elevate privileges by overwriting the AdGuardHome binary...

PT-2024-27083 · Unknown · Adguardhome

Name of the Vulnerable Software and Affected Versions: AdGuardHome versions 0.93 through latest Description: The issue allows unprivileged attackers to escalate privileges via overwriting the AdGuardHome binary. This is a privilege escalation vulnerability in AdGuardHome. Recommendations: For...

CVE-2024-36586

An issue in AdGuardHome v0.93 to latest allows unprivileged attackers to escalate privileges via overwriting the AdGuardHome binary...

CVE-2024-36586

AdGuardHome versions v0.93 through latest are vulnerable to a privilege escalation issue (CWE-269). An unprivileged attacker can escalate privileges on the host OS by overwriting the AdGuardHome binary . To remediate this, users should update to a version that addresses the issue. As a temporary ...

AdGuardHome privilege escalation vulnerability

An issue in AdGuardHome v0.93 to latest allows unprivileged attackers to escalate privileges via overwriting the AdGuardHome binary...

Cross-site Request Forgery (CSRF)

github.com/AdguardTeam/AdGuardHome is vulnerable to Cross-site Request Forgery CSRF. The vulnerability exists because the custom filtering rules functionality in the setupConfig function of home.go, allows a malicious user to redirect the authorized user to malicious urls and modify the custom...

GHSA-MWWC-3JV2-62J3 AdGuardHome vulnerable to Cross-Site Request Forgery

In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery CSRF, in the custom filtering rules functionality. An attacker can persuade an authorized user to follow a malicious link, resulting in deleting/modifying the custom filtering rules. The file that...

AdGuardHome vulnerable to Cross-Site Request Forgery

In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery CSRF, in the custom filtering rules functionality. An attacker can persuade an authorized user to follow a malicious link, resulting in deleting/modifying the custom filtering rules. The file that...

CVE-2022-32175

In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery CSRF, in the custom filtering rules functionality. An attacker can persuade an authorized user to follow a malicious link, resulting in deleting/modifying the custom filtering rules...