Pi-hole < 4.4 - Authenticated Remote Code Execution / Privileges Escalation

!/usr/bin/env python3 Pi-hole = 4.4 RCE Author: Nick Frichette Homepage: https://frichetten.com Note: This exploit must be run with root privileges and port 80 must not be occupied. While it is possible to exploit this from a non standard port, for the sake of simplicity and not having to modify...

Pi-hole 4.4 Remote Code Execution / Privilege Escalation

!/usr/bin/env python3 Pi-hole = 4.4 RCE Author: Nick Frichette Homepage: https://frichetten.com Note: This exploit must be run with root privileges and port 80 must not be occupied. While it is possible to exploit this from a non standard port, for the sake of simplicity and not having to modify...

Pi-hole 4.4 Remote Code Execution

!/usr/bin/env python3 Pi-hole = 4.4 RCE Author: Nick Frichette Homepage: https://frichetten.com Note: This exploit must be run with root privileges and port 80 must not be occupied. While it is possible to exploit this from a non standard port, for the sake of simplicity and not having to modify...

Pi-Hole heisenbergCompensator Blocklist OS Command Execution

This exploits a command execution in Pi-Hole use exploit/unix/http/pihole/blocklistexec msf undefinedblocklistexec show actions ...actions... msf undefinedblocklistexec set ACTION msf undefinedblocklistexec show options ...show and set options... msf undefinedblocklistexec run This module require...

pi-eta.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1156027 Security Researcher DkilerS2 Helped patch 112 vulnerabilities Received 4 Coordinated Disclosure badges Received 8 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting pi-eta.com website and its...

SQL Injection Vulnerability in Easy B2C Mall System V1.1 pi***.php Page

Easy B2C mall system is a mall system based on open source framework development. Easy B2C Mall System V1.1 pi.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

USN-4324-1: Linux kernel vulnerabilities

Al Viro discovered that the vfs layer in the Linux kernel contained a use- after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly expose sensitive information kernel memory. CVE-2020-8428 Shijie Luo discovered that the ext4 file system...

Exploit for Unrestricted Upload of File with Dangerous Type in Pi-Hole

CVE-2020-11108-PoC Two PoCs are in this repo. cve-2020-11108...

Pi-hole Remote Code Execution Vulnerability

Pi-Hole is a DNS server specialized in content filtering and also functions as a DHCP server. Pi-Hole suffers from a remote code execution vulnerability that can be exploited by an attacker to execute arbitrary commands against the server...

Pi-hole Web Interface < 4.3.3 RCE Vulnerability

The Pi-hole Web Interface previously AdminLTE is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

PT-2020-6849

Name of the Vulnerable Software and Affected Versions Pi-hole Web version 4.3.2 Description The issue allows remote code execution by privileged dashboard users via a crafted DHCP static lease. This is due to the failure to neutralize special elements used in the operating system command...

Pi-Hole DHCP MAC OS Command Execution

This exploits a command execution in Pi-Hole use exploit/unix/http/pihole/dhcpmacexec msf undefineddhcpmacexec show actions ...actions... msf undefineddhcpmacexec set ACTION msf undefineddhcpmacexec show options ...show and set options... msf undefineddhcpmacexec run This module requires...

Arbitrary File Deletion Vulnerability in YCCMS controller directory Pi***.cl***.php

YCCMS is a PHP version of a lightweight CMS builder. YCCMS 3.4 version controller directory Pi.class.php arbitrary file deletion vulnerability, an attacker can use the vulnerability to delete arbitrary files...

USN-4300-1: Linux kernel vulnerabilities

It was discovered that the KVM implementation in the Linux kernel, when paravirtual TLB flushes are enabled in guests, the hypervisor in some situations could miss deferred TLB flushes or otherwise mishandle them. An attacker in a guest VM could use this to expose sensitive information read memor...

Introduction to Bluetooth Low Energy

Bluetooth Low Energy BLE is used by almost everyone in our everyday lives, from wireless headphones, to car stereos, computer keyboards and mice, and other everyday items. Even though this standard is popular there seems a general lack of understanding of how it works and what certain terms mean...

pi-2r.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1105634 Security Researcher geeknik Helped patch 8908 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting pi-2r.com website and its...

CVE-2019-10796

rpi through 0.0.3 allows execution of arbritary commands. The variable pinNumbver in function GPIO within src/lib/gpio.js is used as part of the arguement of exec function without any sanitization...

CVE-2019-10796

rpi through 0.0.3 allows execution of arbritary commands. The variable pinNumbver in function GPIO within src/lib/gpio.js is used as part of the arguement of exec function without any sanitization...

USN-4287-1: Linux kernel vulnerabilities

It was discovered that the Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors. A local attacker could use this to expose sensitive information. CVE-2019-14615 It was discovered that the Atheros 802.11ac wireless USB device driver in the...

Command Injection

Overview rpi is a Node.js library to use the Raspberry Pi GPIOs. Affected versions of this package are vulnerable to Command Injection. The variable pinNumbver in function GPIO within src/lib/gpio.js is used as part of the arguement of exec function without any sanitization. PoC by JHU System...