CVE-2024-34361

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. A vulnerability in versions prior to 5.18.3 allows an authenticated user to make internal requests to the server via the gravityDownloadBlocklistFromUrl function. Depending on some...

Exploit for CVE-2024-34361

CVE-2024-34361 Pi-hole Remote Code Execution SSRF to RCE...

CVE-2024-34361

creationtimestamp| type| source ---|---|--- 2024-07-05 22:07:05+00:00| seen| https://t.me/cvedetector/135 2024-07-07 21:24:29+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7897 2024-07-07 21:45:14+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7898...

CVE-2024-34361 Pi-hole Blind Server-Side Request Forgery (SSRF) vulnerability can lead to Remote Code Execution (RCE)

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. A vulnerability in versions prior to 5.18.3 allows an authenticated user to make internal requests to the server via the gravityDownloadBlocklistFromUrl function. Depending on some...