CVE-2020-8816

CVE-2020-8816 Pi-hole Remote Code Execution authenticated Version = 4.3.2 Usage python3 CVE-2020-8816.py -u http://10.10.10.10 -i 10.10.14.172 -p 1337 -pass admin Example More info https://natedotred.wordpress.com/2020/03/28/cve-2020-8816-pi-hole-remote-code-execution/...

CVE-2020-8816

CVE 2020-8816 : Pi-hole versions = 4.3.2 is affected by a Remote Code Execution vulnerability. An authenticated user of the Web portal can execute arbitrary command with the underlying server with the privileges of the local user executing the service. EXAMPLE : go run CVE-2020-8816.go -host $LHO...

CVE-2020-8816

Notes to defend against this exploit Patching Just do it... now. Subscribe to/watch the Pi-hole repository for new releases and Issues and Pull requests if you're serious. Network Do not expose Pi-hole to the internet. Only expose Pi-hole DNS port 53 to DNS clients, not other ports like managemen...

Pi-hole Reflected XSS in 404-Error Page

Pi-hole Admin Interface = 6.2.1 contains a reflected XSS vulnerability on the 404 error page. The URL path is reflected unsanitized into the class attribute of the body tag, allowing attribute injection via a crafted URL to execute arbitrary JavaScript in victim browsers. id: CVE-2025-53533 info:...

uBlockOrigin-HUGE-AI-Blocklist

uBlockOrigin & uBlacklist Huge AI Blocklist A huge blocklist of manually curated sites 1000+ that contain AI generated content, for the purposes of cleaning image search engines Google Search, DuckDuckGo, and Bing with uBlock Origin or uBlacklist. Also works on mobile iOS, iPadOS, Android via...

web

Network-wide ad blocking via your own Linux hardware Pi-hole website | Documentation | Discourse Forum | Donate Pi-hole Web Interface Pi-hole®'s Web interface based off of AdminLTE provides a central location to manage your Pi-hole and review the statistics generated by FTLDNS™. Easy-to-interpret...

CVE-2020-8816

CVE-2020-8816 A Python script to exploit CVE-2020-8816, a remote code execution vulnerability on the Pi-hole. This script uses the techniques found by François Renaud-Philippon to achieve remote code execution on a Pi-hole running a web interface version less than 4.3.3. The exploit requires the...

CVE-2024-28247-Pi-hole-Arbitrary-File-Read

CVE-2024-28247 Pi-hole Arbitrary File Read Description This repository contains an exploit for CVE-2024-28247, a high vulnerability CVSS 7.6 discovered in Pi-hole, a DNS sinkhole widely used to block advertisements and track domains at the network level. The vulnerability arises from the...

CVE-2019-13051

Pi-Hole 4.3.2 Command Injection & PrivEsc CVE-2019-13051 Pi-Hole version 4.3.2 contains a patch to this vulnerability:https://github.com/pi-hole/AdminLTE/pull/974 A big thanks to the Pi-Hole dev team for their awesome project and for making it so easy to report this vulnerability! Executive Summa...

Pi-hole-XSS-CVE-2025-53533

Cross-Site-Scripting XSS in Pi-hole-CVE-2025-53533 exploit PoC Proof-of-Concept exploit for unauthenticated reflected XSS in Pi-hole Web Interface v6.2.1. Patched in v6.3. Quick Start git clone https://github.com/moezbouzayani9/Pi-hole-XSS-CVE-2025-53533.git cd Pi-hole-XSS-CVE-2025-53533 python3...

CVE-2026-35517

CVE-2026-35517 - Pi-hole FTLDNS Remote Code Execution via Newline Injection TL;DR A Remote Code Execution vulnerability in Pi-hole's FTLDNS engine versions 6.0 through 6.5 allows an authenticated attacker to inject arbitrary dnsmasq configuration directives by embedding newline characters \n into...

advisories

LinnemanLabs Research and Advisories Security research, advisories, and proof-of-concept code from LinnemanLabs. Advisories and Research Links to write-ups, disclosures, and reproducible PoCs. Project| Findings / Techniques| CVEs| Result| Write-up| PoC ---|---|---|---|---|--- bluez| ?| ?| LPE to...

CVE-2024-34361-Pi-Hole-SSRF-to-RCE

CVE-2024-34361 Pi-hole Remote Code Execution SSRF to RCE Description This repository contains an exploit for CVE-2024-34361, a critical vulnerability CVSS 8.6 discovered in Pi-hole, a DNS sinkhole widely used to block advertisements and tracking domains at the network level. The vulnerability...

CVE-2026-119336

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.4.2 until 6.5, the root-run advanced/Scripts/updatecheck.sh cron job applies truncate -s 0 and chmod 644 to /etc/pihole/versions while following symbolic links in a directory...

CVE-2026-119335

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. Prior to 6.5, advanced/Scripts/utils.sh getFTLPID attempts to validate the pihole-owned /run/pihole-FTL.pid file with expr "$FTLPID" : "^:digit:", but this rejects only values whose...

CVE-2026-119334

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. Prior to 6.5, gravity.sh checks file:// adlist readability with sudo -u pihole test -r but then allows curl, sometimes running as root, to normalize URL dot segments and open a...

EUVD-2026-114440

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.4.2 until 6.5, the root-run advanced/Scripts/updatecheck.sh cron job applies truncate -s 0 and chmod 644 to /etc/pihole/versions while following symbolic links in a directory...

CVE-2026-119336

Pi-hole versions 6.4.2 until 6.5 are vulnerable to a security issue in the root-run advanced/Scripts/updatecheck.sh cron job. The script applies truncate -s 0 and chmod 644 to /etc/pihole/versions while following symbolic links in a directory owned by the pihole user. An attacker with pihole priv...

CVE-2026-119336 Pi-hole: arbitrary root file clobber / chmod / disclosure via updatecheck.sh cron following /etc/pihole/versions symlink

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.4.2 until 6.5, the root-run advanced/Scripts/updatecheck.sh cron job applies truncate -s 0 and chmod 644 to /etc/pihole/versions while following symbolic links in a directory...

CVE-2026-119336 Pi-hole: arbitrary root file clobber / chmod / disclosure via updatecheck.sh cron following /etc/pihole/versions symlink

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.4.2 until 6.5, the root-run advanced/Scripts/updatecheck.sh cron job applies truncate -s 0 and chmod 644 to /etc/pihole/versions while following symbolic links in a directory...