CVE-2020-8816

CVE-2020-8816 一个用于利用CVE-2020-8816（Pi-hole上的远程代码执行漏洞）的Python脚本。 该脚本使用了François Renaud-Philippon发现的技术，对运行着低于4.3.3版本Web界面的Pi-hole实现远程代码执行。漏洞利用要求www-data用户的路径为/opt/pihole:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin。 root@kitploit: python3 .\CVE-2020-8816.py -h usage: CVE-2020-8816.py...

pi-hole

自身のLinuxハードウェアによるネットワーク全体の広告ブロック Pi-hole® は、クライアント側のソフトウェアをインストールすることなく、不要なコンテンツからデバイスを保護する DNSシンクホール です。 簡単インストール : ダイアログが10分以内に簡単なインストール手順を説明します 断固たる : 広告が多く含まれるモバイルアプリやスマートTVなど、ブラウザ以外の場所でもコンテンツをブロックします 応答性 : DNSクエリをキャッシュすることで、日常のブラウジングの動作をシームレスに高速化します 軽量 : 最小限のハードウェアとソフトウェア要件でスムーズに動作します 堅牢 :...

pi-hole

Network-wide ad blocking via your own Linux hardware The Pi-hole® is a DNS sinkhole that protects your devices from unwanted content without installing any client-side software. Easy-to-install : our dialogs walk you through the simple installation process in less than ten minutes Resolute :...

CVE-2020-8816

CVE-2020-8816 Pi-hole Ejecución Remota de Código autenticada Versión = 4.3.2 Uso python3 CVE-2020-8816.py -u http://10.10.10.10 -i 10.10.14.172 -p 1337 -pass admin Ejemplo Más información https://natedotred.wordpress.com/2020/03/28/cve-2020-8816-pi-hole-remote-code-execution/...

CVE-2019-13051

Pi-Hole /tmp/pocproof.txt"@example.com 10 分钟内，一个由 root 拥有、内容为“test”的文件将以 root 权限在“/tmp/pocproof.txt”中创建。 为了执行任何更有意义的攻击，还需要绕过空格的限制（空格不是有效的电子邮件字符，会被 FILTERVALIDATEEMAIL 函数捕获）。为此，利用了 Linux 内部变量 $IFS（在大多数 Unix 操作系统中默认为空格）。 PoC： 注意：这可以使用 POSIX shell 语法（即 &&、|| ...）通过单行命令实现自动化。 1...

Pi-hole Reflected XSS in 404-Error Page

Pi-hole Admin Interface = 6.2.1 contains a reflected XSS vulnerability on the 404 error page. The URL path is reflected unsanitized into the class attribute of the body tag, allowing attribute injection via a crafted URL to execute arbitrary JavaScript in victim browsers. id: CVE-2025-53533 info:...

CVE-2020-8816

防御此漏洞的注意事项 补丁 立即执行...就现在。 订阅/关注 Pi-hole 仓库 以获取新版本（如果你认真对待，也要关注 Issues 和 Pull requests）。 网络 不要将 Pi-hole 暴露到互联网。 仅将 Pi-hole DNS 端口 53 暴露给 DNS 客户端，不要暴露其他端口如管理界面。 管理 对管理员账户使用唯一且复杂（意为多字符）的密码短语。 CVE-2020-8816 完整的PoC可在PDF文档中查看 这是针对 Pi-hole 4.3.2 RCE 的 PoC...

CVE-2024-28247-Pi-hole-Arbitrary-File-Read

CVE-2024-28247 Pi-hole – Beliebiger Dateizugriff Beschreibung Dieses Repository enthält einen Exploit für CVE-2024-28247, eine hohe Schwachstelle CVSS 7.6, die in Pi-hole entdeckt wurde, einem DNS-Sinkhole, das häufig verwendet wird, um Werbung zu blockieren und Domains auf Netzwerkebene zu...

CVE-2020-8816

CVE 2020-8816 : Pi-hole versioni = 4.3.2 è affetto da una vulnerabilità di Remote Code Execution. Un utente autenticato del portale Web può eseguire comandi arbitrari sul server sottostante con i privilegi dell'utente locale che esegue il servizio. ESEMPIO : go run CVE-2020-8816.go -host $LHOST -...

Pi-hole-XSS-CVE-2025-53533

Exploração de Cross-Site-Scripting XSS no Pi-hole - CVE-2025-53533 PoC Prova de conceito de exploração para XSS refletido não autenticado na Interface Web do Pi-hole v6.2.1. Corrigido na v6.3. Início Rápido root@kitploit: git clone https://github.com/moezbouzayani9/Pi-hole-XSS-CVE-2025-53533.git ...

CVE-2026-35517

CVE-2026-35517 - Pi-hole FTLDNS Remote Code Execution durch Newline-Injection TL;DR Eine Remote Code Execution -Schwachstelle in der FTLDNS-Engine von Pi-hole Versionen 6.0 bis 6.5 ermöglicht es einem authentifizierten Angreifer, beliebige dnsmasq-Konfigurationsdirektiven zu injizieren, indem...

web

Blocco pubblicità a livello di rete tramite il tuo hardware Linux Sito web di Pi-hole | Documentazione | Forum Discourse | Dona Interfaccia Web di Pi-hole L'interfaccia Web di Pi-hole® basata su AdminLTE offre una posizione centrale per gestire il tuo Pi-hole e consultare le statistiche generate ...

CVE-2024-34361-Pi-Hole-SSRF-to-RCE

CVE-2024-34361 Esecuzione remota di codice in Pi-hole da SSRF a RCE Descrizione Questo repository contiene uno sfruttamento per CVE-2024-34361, una vulnerabilità critica CVSS 8.6 scoperta in Pi-hole, un sinkhole DNS ampiamente utilizzato per bloccare annunci pubblicitari e domini di tracciamento ...

uBlockOrigin-HUGE-AI-Blocklist

uBlockOrigin & uBlacklist Huge AI Blocklist Uma enorme lista de bloqueio de sites selecionados manualmente 1000+ que contêm conteúdo gerado por IA, com o objetivo de limpar mecanismos de busca de imagens Google Search, DuckDuckGo e Bing usando uBlock Origin ou uBlacklist. Também funciona em...

CVE-2026-50130

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.0 to 6.4.2, a user with code execution as the unprivileged pihole user can escalate to root by replacing /etc/pihole/logrotate. The replacement is laundered to root:root...

CVE-2026-50130

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.0 to 6.4.2, a user with code execution as the unprivileged pihole user can escalate to root by replacing /etc/pihole/logrotate. The replacement is laundered to root:root...

CVE-2026-50130 Pi-hole: Local privilege escalation from `pihole` user to root via `/etc/pihole/logrotate`

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.0 to 6.4.2, a user with code execution as the unprivileged pihole user can escalate to root by replacing /etc/pihole/logrotate. The replacement is laundered to root:root...

CVE-2026-50130 Pi-hole: Local privilege escalation from `pihole` user to root via `/etc/pihole/logrotate`

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.0 to 6.4.2, a user with code execution as the unprivileged pihole user can escalate to root by replacing /etc/pihole/logrotate. The replacement is laundered to root:root...

CVE-2026-44693

Pi-hole FTL is the core engine of the Pi-hole network-level advertisement and tracker blocker. Prior to version 6.6.1, Pi-hole FTL contains a race condition vulnerability in the HTTP session management subsystem, introduced with the v6.0 rewrite of the embedded CivetWeb-based web server. This iss...

CVE-2026-44693 Pi-hole FTL: Unauthenticated Session Hijacking via Race Condition on Global Session Buffer

Pi-hole FTL is the core engine of the Pi-hole network-level advertisement and tracker blocker. Prior to version 6.6.1, Pi-hole FTL contains a race condition vulnerability in the HTTP session management subsystem, introduced with the v6.0 rewrite of the embedded CivetWeb-based web server. This iss...