CVE-2024-34361-Pi-Hole-SSRF-to-RCE

CVE-2024-34361 Execução Remota de Código no Pi-hole SSRF para RCE Descrição Este repositório contém um exploit para CVE-2024-34361, uma vulnerabilidade crítica CVSS 8.6 descoberta no Pi-hole, um sumidouro de DNS amplamente utilizado para bloquear anúncios e domínios de rastreamento a nível de red...

CVE-2020-8816

CVE-2020-8816 Um script em Python para explorar o CVE-2020-8816, uma vulnerabilidade de execução remota de código no Pi-hole. Este script utiliza as técnicas descobertas por François Renaud-Philippon para obter execução remota de código em um Pi-hole que esteja executando uma versão da interface...

CVE-2020-8816

इस एक्सप्लॉइट से बचाव के लिए नोट्स पैचिंग बस कर दो... अभी। नए रिलीज़ के लिए Pi-hole रिपॉज़िटरी को सब्सक्राइब/वॉच करें और यदि आप गंभीर हैं तो Issues और Pull requests भी। नेटवर्क Pi-hole को इंटरनेट पर एक्सपोज़ न करें। केवल Pi-hole DNS पोर्ट 53 को DNS क्लाइंट्स के लिए एक्सपोज़ करें, अन्य पोर्ट्स जैस...

CVE-2020-8816

CVE 2020-8816 : Pi-hole संस्करण = 4.3.2 एक रिमोट कोड निष्पादन भेद्यता से प्रभावित है। वेब पोर्टल का एक प्रमाणित उपयोगकर्ता अंतर्निहित सर्वर पर सेवा चलाने वाले स्थानीय उपयोगकर्ता के विशेषाधिकारों के साथ मनमाना कमांड निष्पादित कर सकता है। उदाहरण : go run CVE-2020-8816.go -host $LHOST -p $LPORT -pas...

web

अपने स्वयं के Linux हार्डवेयर के माध्यम से नेटवर्क-व्यापी विज्ञापन अवरोधन पाई-होल वेबसाइट | दस्तावेज़ीकरण | डिस्कोर्स फ़ोरम | दान करें पाई-होल वेब इंटरफ़ेस पाई-होल® का वेब इंटरफ़ेस AdminLTE पर आधारित आपके पाई-होल को प्रबंधित करने और FTLDNS™ द्वारा उत्पन्न आँकड़ों की समीक्षा करने के लिए एक केंद्री...

uBlockOrigin-HUGE-AI-Blocklist

uBlockOrigin और uBlacklist विशाल AI ब्लॉकलिस्ट मैन्युअल रूप से चयनित 1000+ साइटों की एक विशाल ब्लॉकलिस्ट जिनमें AI जनित सामग्री है, जिसका उद्देश्य uBlock Origin या uBlacklist के साथ इमेज सर्च इंजन Google Search, DuckDuckGo, और Bing को साफ करना है। मोबाइल पर भी काम करता है iOS, iPadOS, Android...

pi-hole

Bloqueio de anúncios em toda a rede usando seu próprio hardware Linux O Pi-hole® é um DNS sinkhole que protege seus dispositivos contra conteúdo indesejado sem instalar nenhum software no lado do cliente. Fácil de instalar : nossos diálogos guiam você pelo processo de instalação simples em menos ...

CVE-2019-13051

Pi-Hole 4.3.2 حقن الأوامر وتصعيد الصلاحيات CVE-2019-13051 يحتوي إصدار Pi-Hole 4.3.2 على تصحيح لهذه الثغرة:https://github.com/pi-hole/AdminLTE/pull/974 شكر كبير لفريق تطوير Pi-Hole لمشروعهم الرائع ولتسهيلهم الإبلاغ عن هذه الثغرة! الملخص التنفيذي من الممكن الحصول عن بُعد على وصول بصلاحيات root على...

CVE-2020-8816

CVE-2020-8816 Pi-hole प्रमाणित रिमोट कोड निष्पादन संस्करण = 4.3.2 उपयोग python3 CVE-2020-8816.py -u http://10.10.10.10 -i 10.10.14.172 -p 1337 -pass admin उदाहरण अधिक जानकारी https://natedotred.wordpress.com/2020/03/28/cve-2020-8816-pi-hole-remote-code-execution/...

pi-hole

Network-wide ad blocking via your own Linux hardware The Pi-hole® is a DNS sinkhole that protects your devices from unwanted content without installing any client-side software. Easy-to-install : our dialogs walk you through the simple installation process in less than ten minutes Resolute :...

Pi-hole Reflected XSS in 404-Error Page

Pi-hole Admin Interface = 6.2.1 contains a reflected XSS vulnerability on the 404 error page. The URL path is reflected unsanitized into the class attribute of the body tag, allowing attribute injection via a crafted URL to execute arbitrary JavaScript in victim browsers. id: CVE-2025-53533 info:...

CVE-2024-28247-Pi-hole-Arbitrary-File-Read

CVE-2024-28247 قراءة ملفات عشوائية في Pi-hole الوصف يحتوي هذا المستودع على استغلال Exploit لثغرة CVE-2024-28247، وهي ثغرة عالية الخطورة CVSS 7.6 اكتُشفت في Pi-hole، وهو نظام DNS sinkhole يُستخدم على نطاق واسع لحظر الإعلانات وتتبع النطاقات على مستوى الشبكة. تنشأ الثغرة من سوء التعامل مع مسارات...

CVE-2026-50130

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.0 to 6.4.2, a user with code execution as the unprivileged pihole user can escalate to root by replacing /etc/pihole/logrotate. The replacement is laundered to root:root...

CVE-2026-50130

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.0 to 6.4.2, a user with code execution as the unprivileged pihole user can escalate to root by replacing /etc/pihole/logrotate. The replacement is laundered to root:root...

CVE-2026-50130 Pi-hole: Local privilege escalation from `pihole` user to root via `/etc/pihole/logrotate`

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.0 to 6.4.2, a user with code execution as the unprivileged pihole user can escalate to root by replacing /etc/pihole/logrotate. The replacement is laundered to root:root...

CVE-2026-50130 Pi-hole: Local privilege escalation from `pihole` user to root via `/etc/pihole/logrotate`

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.0 to 6.4.2, a user with code execution as the unprivileged pihole user can escalate to root by replacing /etc/pihole/logrotate. The replacement is laundered to root:root...

CVE-2026-44693

Pi-hole FTL is the core engine of the Pi-hole network-level advertisement and tracker blocker. Prior to version 6.6.1, Pi-hole FTL contains a race condition vulnerability in the HTTP session management subsystem, introduced with the v6.0 rewrite of the embedded CivetWeb-based web server. This iss...

CVE-2026-44693 Pi-hole FTL: Unauthenticated Session Hijacking via Race Condition on Global Session Buffer

Pi-hole FTL is the core engine of the Pi-hole network-level advertisement and tracker blocker. Prior to version 6.6.1, Pi-hole FTL contains a race condition vulnerability in the HTTP session management subsystem, introduced with the v6.0 rewrite of the embedded CivetWeb-based web server. This iss...

CVE-2026-44693 Pi-hole FTL: Unauthenticated Session Hijacking via Race Condition on Global Session Buffer

Pi-hole FTL is the core engine of the Pi-hole network-level advertisement and tracker blocker. Prior to version 6.6.1, Pi-hole FTL contains a race condition vulnerability in the HTTP session management subsystem, introduced with the v6.0 rewrite of the embedded CivetWeb-based web server. This iss...

EUVD-2026-36194

Pi-hole FTL is the core engine of the Pi-hole network-level advertisement and tracker blocker. Prior to version 6.6.1, Pi-hole FTL contains a race condition vulnerability in the HTTP session management subsystem, introduced with the v6.0 rewrite of the embedded CivetWeb-based web server. This iss...