PT-2024-25819

Name of the Vulnerable Software and Affected Versions Pi-hole versions prior to 5.18.3 Description Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. A vulnerability allows an authenticated user to make internal requests to the serve...

PT-2020-12554

Name of the Vulnerable Software and Affected Versions Pi-hole versions 4.4 and earlier Description The issue allows an authenticated adversary to upload arbitrary files, which can be abused for Remote Code Execution by writing to a PHP file in the web directory. This can also be used in conjuncti...