pi-hole

Network-wide ad blocking via your own Linux hardware The Pi-hole® is a DNS sinkhole that protects your devices from unwanted content without installing any client-side software. Easy-to-install : our dialogs walk you through the simple installation process in less than ten minutes Resolute :...

web

Network-wide ad blocking via your own Linux hardware Pi-hole website | Documentation | Discourse Forum | Donate Pi-hole Web Interface Pi-hole®'s Web interface based off of AdminLTE provides a central location to manage your Pi-hole and review the statistics generated by FTLDNS™. Easy-to-interpret...

CVE-2024-34361-Pi-Hole-SSRF-to-RCE

CVE-2024-34361 Pi-hole Ejecución Remota de Código SSRF a RCE Descripción Este repositorio contiene un exploit para CVE-2024-34361, una vulnerabilidad crítica CVSS 8.6 descubierta en Pi-hole, un sumidero DNS ampliamente utilizado para bloquear anuncios y dominios de rastreo a nivel de red. La...

Pi-hole Reflected XSS in 404-Error Page

Pi-hole Admin Interface = 6.2.1 contains a reflected XSS vulnerability on the 404 error page. The URL path is reflected unsanitized into the class attribute of the body tag, allowing attribute injection via a crafted URL to execute arbitrary JavaScript in victim browsers. id: CVE-2025-53533 info:...

uBlockOrigin-HUGE-AI-Blocklist

uBlockOrigin & uBlacklist Huge AI Blocklist A huge blocklist of manually curated sites 1000+ that contain AI generated content, for the purposes of cleaning image search engines Google Search, DuckDuckGo, and Bing with uBlock Origin or uBlacklist. Also works on mobile iOS, iPadOS, Android via...

CVE-2020-8816

CVE-2020-8816 Pi-hole Ejecución Remota de Código autenticada Versión = 4.3.2 Uso python3 CVE-2020-8816.py -u http://10.10.10.10 -i 10.10.14.172 -p 1337 -pass admin Ejemplo Más información https://natedotred.wordpress.com/2020/03/28/cve-2020-8816-pi-hole-remote-code-execution/...

pi-hole

Bloqueo de anuncios en toda la red mediante tu propio hardware Linux Pi-hole® es un sumidero de DNS que protege tus dispositivos de contenido no deseado sin necesidad de instalar software en el cliente. Fácil de instalar : nuestros diálogos te guían a través del sencillo proceso de instalación en...

CVE-2019-13051

Pi-Hole 4.3.2 Inyección de Comandos y Escalada de Privilegios CVE-2019-13051 La versión 4.3.2 de Pi-Hole contiene un parche para esta vulnerabilidad:https://github.com/pi-hole/AdminLTE/pull/974 ¡Un gran agradecimiento al equipo de desarrollo de Pi-Hole por su increíble proyecto y por hacer tan...

CVE-2024-28247-Pi-hole-Arbitrary-File-Read

CVE-2024-28247 Pi-hole Lectura Arbitraria de Archivos Descripción Este repositorio contiene un exploit para CVE-2024-28247, una vulnerabilidad de alta criticidad CVSS 7.6 descubierta en Pi-hole, un sumidero DNS ampliamente utilizado para bloquear anuncios y rastrear dominios a nivel de red. La...

web

자체 Linux 하드웨어를 통한 네트워크 전체 광고 차단 Pi-hole 웹사이트 | 문서 | Discourse 포럼 | 기부 Pi-hole 웹 인터페이스 Pi-hole®의 웹 인터페이스AdminLTE 기반는 Pi-hole을 관리하고 FTLDNS™가 생성한 통계를 검토할 수 있는 중앙 위치를 제공합니다. 이해하기 쉬움 : 간단한 그래프와 아름다운 색상으로 Pi-hole 통계를 쉽게 이해할 수 있습니다 반응형 : 데스크톱, 태블릿, 모바일 기기에서 모두 멋지게 표시됩니다 유용함 : 설정을 통해 Pi-hole을 제어하고 구성할 수...

CVE-2020-8816

CVE 2020-8816 : Pi-hole versiones = 4.3.2 se ve afectado por una vulnerabilidad de ejecución remota de código. Un usuario autenticado del portal web puede ejecutar un comando arbitrario en el servidor subyacente con los privilegios del usuario local que ejecuta el servicio. EJEMPLO : go run...

CVE-2026-35517

CVE-2026-35517 - Pi-hole FTLDNS 개행 문자 주입을 통한 원격 코드 실행 TL;DR Pi-hole의 FTLDNS 엔진버전 6.06.5에서 원격 코드 실행 취약점이 발견되었습니다. 인증된 공격자가 dns.upstreams API 파라미터에 개행 문자\n를 삽입하여 임의의 dnsmasq 구성 지시문을 주입할 수 있습니다. dnsmasq는 셸 명령을 실행하는 지시문을 지원하므로, 이 개행 문자 주입은 호스트 시스템에서의 전체 명령 실행 으로 직접 이어집니다. 이것은 단일 버그가 아니라 다섯 가지 서로 다른 구...

Pi-hole-XSS-CVE-2025-53533

Cross-Site-Scripting XSS in Pi-hole-CVE-2025-53533 exploit PoC Proof-of-Concept exploit for unauthenticated reflected XSS in Pi-hole Web Interface v6.2.1. Patched in v6.3. Quick Start root@kitploit: git clone https://github.com/moezbouzayani9/Pi-hole-XSS-CVE-2025-53533.git cd...

CVE-2020-8816

CVE-2020-8816 Un script de Python para explotar CVE-2020-8816, una vulnerabilidad de ejecución remota de código en Pi-hole. Este script utiliza las técnicas encontradas por François Renaud-Philippon para lograr la ejecución remota de código en un Pi-hole que ejecute una versión de la interfaz web...

CVE-2026-50130

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.0 to 6.4.2, a user with code execution as the unprivileged pihole user can escalate to root by replacing /etc/pihole/logrotate. The replacement is laundered to root:root...

CVE-2026-50130

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.0 to 6.4.2, a user with code execution as the unprivileged pihole user can escalate to root by replacing /etc/pihole/logrotate. The replacement is laundered to root:root...

CVE-2026-50130 Pi-hole: Local privilege escalation from `pihole` user to root via `/etc/pihole/logrotate`

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.0 to 6.4.2, a user with code execution as the unprivileged pihole user can escalate to root by replacing /etc/pihole/logrotate. The replacement is laundered to root:root...

CVE-2026-50130 Pi-hole: Local privilege escalation from `pihole` user to root via `/etc/pihole/logrotate`

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.0 to 6.4.2, a user with code execution as the unprivileged pihole user can escalate to root by replacing /etc/pihole/logrotate. The replacement is laundered to root:root...

CVE-2026-44693

Pi-hole FTL is the core engine of the Pi-hole network-level advertisement and tracker blocker. Prior to version 6.6.1, Pi-hole FTL contains a race condition vulnerability in the HTTP session management subsystem, introduced with the v6.0 rewrite of the embedded CivetWeb-based web server. This iss...

CVE-2026-44693 Pi-hole FTL: Unauthenticated Session Hijacking via Race Condition on Global Session Buffer

Pi-hole FTL is the core engine of the Pi-hole network-level advertisement and tracker blocker. Prior to version 6.6.1, Pi-hole FTL contains a race condition vulnerability in the HTTP session management subsystem, introduced with the v6.0 rewrite of the embedded CivetWeb-based web server. This iss...