12 matches found
Pi-hole Remote Code Execution (CVE-2020-11108)
A remote code execution vulnerability exists in Pi-hole. An authenticated attacker can exploit this vulnerability by injecting arbitrary PHP code into the session. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Pi-hole 4.4.0 CVE-2020-11108 - Remote Code Execution
Pi-hole version 4.4.0 suffers from a remote code execution vulnerability. Exploit Title: Pi-hole 4.4.0 - Remote Code Execution Authenticated Date: 2020-05-22 Exploit Author: Photubias Vendor Advisory: 1 https://github.com/pi-hole/AdminLTE Version: Pi-hole . Based and improved on:...
Pi-hole 4.4.0 Remote Code Execution
Exploit Title: Pi-hole 4.4.0 - Remote Code Execution Authenticated Date: 2020-05-22 Exploit Author: Photubias Vendor Advisory: 1 https://github.com/pi-hole/AdminLTE Version: Pi-hole . Based and improved on: https://github.com/Frichetten/CVE-2020-11108-PoC/blob/master/cve-2020-11108-rce.py File na...
Pi-hole 4.4.0 - Remote Code Execution (Authenticated) Exploit
Exploit for linux platform in category web applications Exploit Title: Pi-hole 4.4.0 - Remote Code Execution Authenticated Date: 2020-05-22 Exploit Author: Photubias Vendor Advisory: 1 https://github.com/pi-hole/AdminLTE Version: Pi-hole . Based and improved on:...
Pi-hole 4.4.0 - Remote Code Execution (Authenticated)
Exploit Title: Pi-hole 4.4.0 - Remote Code Execution Authenticated Date: 2020-05-22 Exploit Author: Photubias Vendor Advisory: 1 https://github.com/pi-hole/AdminLTE Version: Pi-hole . Based and improved on: https://github.com/Frichetten/CVE-2020-11108-PoC/blob/master/cve-2020-11108-rce.py File na...
Pi-Hole - heisenbergCompensator Blocklist OS Command Execution Exploit
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Pi-Hole heisenbergCompensator Blocklist OS Command Execution', 'Description' = %q This exploits a command execution in Pi-Hole MSFLICENSE, 'Autho...
Pi-Hole heisenbergCompensator Blocklist OS Command Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Pi-Hole heisenbergCompensator Blocklist OS Command Execution', 'Description' = %q This exploits a command execution in Pi-Hole MSFLICENSE, 'Autho...
Pi-Hole heisenbergCompensator Blocklist OS Command Execution
This exploits a command execution in Pi-Hole 'Pi-Hole heisenbergCompensator Blocklist OS Command Execution', 'Description' = %q This exploits a command execution in Pi-Hole = 4.4. A new blocklist is added, and then an update is forced gravity to pull in the blocklist content. PHP content is then...
CVE-2020-11108
creationtimestamp| type| source ---|---|--- 2020-05-11 17:21:08+00:00| published-proof-of-concept| https://t.me/cybershit/749 2020-05-12 10:03:03+00:00| published-proof-of-concept| https://t.me/androidMalware/822 2020-05-12 14:45:39+00:00| published-proof-of-concept| https://t.me/canyoupwnme/6431...
CVE-2020-11108
CVE-2020-11108 affects Pi-hole 4.4 and earlier, via the Gravity updater’s gravity_DownloadBlocklistFromUrl in gravity.sh. An authenticated attacker can upload arbitrary files, enabling remote code execution by writing a PHP file into the webroot. The issue can be leveraged for privilege escalatio...
CVE-2020-11108
The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files. This can be abused for Remote Code Execution by writing to a PHP file in the web directory. Also, it can be used in conjunction with the sudo rule for the www-data user to escalate privileges t...
