533 matches found
CVE-2020-14971
Pi-hole through 5.0 allows code injection in piholedhcp the Static DHCP Leases section by modifying Teleporter backup files and then restoring them. This occurs in settings.php. To exploit this, an attacker would request a backup of limited files via teleporter.php. These are placed into a .tar.g...
CVE-2020-14971
Pi-hole through 5.0 allows code injection in piholedhcp the Static DHCP Leases section by modifying Teleporter backup files and then restoring them. This occurs in settings.php. To exploit this, an attacker would request a backup of limited files via teleporter.php. These are placed into a .tar.g...
Code injection
Pi-hole through 5.0 allows code injection in piholedhcp the Static DHCP Leases section by modifying Teleporter backup files and then restoring them. This occurs in settings.php. To exploit this, an attacker would request a backup of limited files via teleporter.php. These are placed into a .tar.g...
CVE-2020-14971
Pi-hole through 5.0 allows code injection in piholedhcp the Static DHCP Leases section by modifying Teleporter backup files and then restoring them. This occurs in settings.php. To exploit this, an attacker would request a backup of limited files via teleporter.php. These are placed into a .tar.g...
CVE-2020-14971
Pi-hole through 5.0 allows code injection in piholedhcp the Static DHCP Leases section by modifying Teleporter backup files and then restoring them. This occurs in settings.php. To exploit this, an attacker would request a backup of limited files via teleporter.php. These are placed into a .tar.g...
CVE-2020-14971
CVE-2020-14971 affects Pi-hole up to version 5.0, enabling code injection in the piholedhcp component (Static DHCP Leases) by tampering Teleporter backup archives. An attacker can request a limited backup via teleporter.php, receive a .tar.gz, modify the host parameter in dnsmasq.d files inside t...
CVE-2020-14971: Missing Authorization
Pi-hole through 5.0 allows code injection in piholedhcp the Static DHCP Leases section by modifying Teleporter backup files and then restoring them. This occurs in settings.php. To exploit this, an attacker would request a backup of limited files via teleporter.php. These are placed into a .tar.g...
PT-2020-14097
Name of the Vulnerable Software and Affected Versions Pi-hole through 5.0 Description The issue allows code injection in the Static DHCP Leases section by modifying Teleporter backup files and then restoring them, which occurs in settings.php. An attacker can exploit this by requesting a backup o...
Pi-Hole DHCP Command Injection (CVE-2020-8816)
A command injection vulnerability exists in Pi-hole. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Exploit for OS Command Injection in Pi-Hole
Notes to defend against this exploit Patching Just do it...
Pi-hole Remote Code Execution (CVE-2020-11108)
A remote code execution vulnerability exists in Pi-hole. An authenticated attacker can exploit this vulnerability by injecting arbitrary PHP code into the session. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Pi-Hole 4.3.2 DHCP MAC OS CVE-2020-8816 - Command Execution
This Metasploit module exploits a command execution in Pi-Hole versions 4.3.2... This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Pi-Hole DHCP MAC OS Command Execution', 'Description' = %q This...
Pi-hole 4.4.0 CVE-2020-11108 - Remote Code Execution
Pi-hole version 4.4.0 suffers from a remote code execution vulnerability. Exploit Title: Pi-hole 4.4.0 - Remote Code Execution Authenticated Date: 2020-05-22 Exploit Author: Photubias Vendor Advisory: 1 https://github.com/pi-hole/AdminLTE Version: Pi-hole . Based and improved on:...
CVE-2020-8816
Pi-hole Web v4.3.2 aka AdminLTE allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease...
CVE-2020-8816
Pi-hole Web v4.3.2 aka AdminLTE allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease...
Remote code execution
Pi-hole Web v4.3.2 aka AdminLTE allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease...
CVE-2020-8816
CVE-2020-8816 : Pi-hole Web (AdminLTE) 4.3.2 is vulnerable to Remote Code Execution via a crafted DHCP static lease. Exploitation requires privileged dashboard access and is authenticated; the flaw arises from how DHCP static leases are processed, enabling an attacker with dashboard privileges to...
CVE-2020-8816
Pi-hole Web v4.3.2 aka AdminLTE allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease...
