CVE-2020-8816

CVE-2020-8816 Pi-hole Ejecución Remota de Código autenticada Versión = 4.3.2 Uso python3 CVE-2020-8816.py -u http://10.10.10.10 -i 10.10.14.172 -p 1337 -pass admin Ejemplo Más información https://natedotred.wordpress.com/2020/03/28/cve-2020-8816-pi-hole-remote-code-execution/...

uBlockOrigin-HUGE-AI-Blocklist

uBlockOrigin & uBlacklist Lista Negra Masiva de IA Una lista negra masiva de sitios seleccionados manualmente más de 1000 que contienen contenido generado por IA, con el propósito de limpiar los motores de búsqueda de imágenes Google Search, DuckDuckGo y Bing usando uBlock Origin o uBlacklist...

Pi-hole Reflected XSS in 404-Error Page

Pi-hole Admin Interface = 6.2.1 contains a reflected XSS vulnerability on the 404 error page. The URL path is reflected unsanitized into the class attribute of the body tag, allowing attribute injection via a crafted URL to execute arbitrary JavaScript in victim browsers. id: CVE-2025-53533 info:...

pi-hole

通过您自己的 Linux 硬件实现网络范围广告屏蔽 Pi-hole® 是一个 DNS 黑洞，可在无需安装任何客户端软件的情况下保护您的设备免受不需要内容的侵扰。 易于安装 ：我们的对话框引导您在十分钟内完成简单安装过程 坚决 ：内容在 非浏览器位置 被屏蔽，例如广告泛滥的移动应用和智能电视 响应迅速 ：通过缓存 DNS 查询，无缝提升日常浏览速度体验 轻量级 ：在 最低硬件和软件要求 下流畅运行 健壮 ：经过质量保证的命令行界面，确保互操作性 洞察力强 ：美观且响应式的 Web 界面仪表板，用于查看和控制您的 Pi-hole 多才多艺 ：可选作 DHCP 服务器，确保 所有 设备自动受到...

CVE-2024-28247-Pi-hole-Arbitrary-File-Read

CVE-2024-28247 Pi-hole Lectura Arbitraria de Archivos Descripción Este repositorio contiene un exploit para CVE-2024-28247, una vulnerabilidad de alta criticidad CVSS 7.6 descubierta en Pi-hole, un sumidero DNS ampliamente utilizado para bloquear anuncios y rastrear dominios a nivel de red. La...

CVE-2019-13051

Pi-Hole 4.3.2 Inyección de Comandos y Escalada de Privilegios CVE-2019-13051 La versión 4.3.2 de Pi-Hole contiene un parche para esta vulnerabilidad:https://github.com/pi-hole/AdminLTE/pull/974 ¡Un gran agradecimiento al equipo de desarrollo de Pi-Hole por su increíble proyecto y por hacer tan...

web

Bloqueo de anuncios en toda tu red con tu propio hardware Linux Sitio web de Pi-hole | Documentación | Foro de Discourse | Donar Interfaz web de Pi-hole La interfaz web de Pi-hole® basada en AdminLTE proporciona un lugar central para administrar tu Pi-hole y revisar las estadísticas generadas por...

web

Network-wide ad blocking via your own Linux hardware Pi-hole website | Documentation | Discourse Forum | Donate Pi-hole Web Interface Pi-hole®'s Web interface based off of AdminLTE provides a central location to manage your Pi-hole and review the statistics generated by FTLDNS™. Easy-to-interpret...

CVE-2024-34361-Pi-Hole-SSRF-to-RCE

CVE-2024-34361 Pi-hole Remote Code Execution SSRF to RCE Description This repository contains an exploit for CVE-2024-34361, a critical vulnerability CVSS 8.6 discovered in Pi-hole, a DNS sinkhole widely used to block advertisements and tracking domains at the network level. The vulnerability...

CVE-2020-8816

CVE-2020-8816 Un script de Python para explotar CVE-2020-8816, una vulnerabilidad de ejecución remota de código en Pi-hole. Este script utiliza las técnicas encontradas por François Renaud-Philippon para lograr la ejecución remota de código en un Pi-hole que ejecute una versión de la interfaz web...

CVE-2020-8816

Notas para defenderse de este exploit Parcheo Simplemente hazlo... ahora. Suscríbete o sigue el repositorio de Pi-hole para nuevas versiones y Issues y Pull requests si eres serio. Red No expongas Pi-hole a internet. Solo expón el puerto DNS 53 de Pi-hole a clientes DNS, no otros puertos como la...

CVE-2020-8816

CVE 2020-8816 : Pi-hole versions = 4.3.2 is affected by a Remote Code Execution vulnerability. An authenticated user of the Web portal can execute arbitrary command with the underlying server with the privileges of the local user executing the service. EXAMPLE : go run CVE-2020-8816.go -host $LHO...

CVE-2026-35517

CVE-2026-35517 - Pi-hole FTLDNS Remote Code Execution via Newline Injection TL;DR A Remote Code Execution vulnerability in Pi-hole's FTLDNS engine versions 6.0 through 6.5 allows an authenticated attacker to inject arbitrary dnsmasq configuration directives by embedding newline characters \n into...

Pi-hole-XSS-CVE-2025-53533

Cross-Site-Scripting XSS in Pi-hole-CVE-2025-53533 exploit PoC Proof-of-Concept exploit for unauthenticated reflected XSS in Pi-hole Web Interface v6.2.1. Patched in v6.3. Quick Start root@kitploit: git clone https://github.com/moezbouzayani9/Pi-hole-XSS-CVE-2025-53533.git cd...

CVE-2026-50130

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.0 to 6.4.2, a user with code execution as the unprivileged pihole user can escalate to root by replacing /etc/pihole/logrotate. The replacement is laundered to root:root...

CVE-2026-50130

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.0 to 6.4.2, a user with code execution as the unprivileged pihole user can escalate to root by replacing /etc/pihole/logrotate. The replacement is laundered to root:root...

CVE-2026-50130 Pi-hole: Local privilege escalation from `pihole` user to root via `/etc/pihole/logrotate`

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.0 to 6.4.2, a user with code execution as the unprivileged pihole user can escalate to root by replacing /etc/pihole/logrotate. The replacement is laundered to root:root...

CVE-2026-50130 Pi-hole: Local privilege escalation from `pihole` user to root via `/etc/pihole/logrotate`

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.0 to 6.4.2, a user with code execution as the unprivileged pihole user can escalate to root by replacing /etc/pihole/logrotate. The replacement is laundered to root:root...

CVE-2026-44693

Pi-hole FTL is the core engine of the Pi-hole network-level advertisement and tracker blocker. Prior to version 6.6.1, Pi-hole FTL contains a race condition vulnerability in the HTTP session management subsystem, introduced with the v6.0 rewrite of the embedded CivetWeb-based web server. This iss...

CVE-2026-44693 Pi-hole FTL: Unauthenticated Session Hijacking via Race Condition on Global Session Buffer

Pi-hole FTL is the core engine of the Pi-hole network-level advertisement and tracker blocker. Prior to version 6.6.1, Pi-hole FTL contains a race condition vulnerability in the HTTP session management subsystem, introduced with the v6.0 rewrite of the embedded CivetWeb-based web server. This iss...