CVE-2020-8816

Pi-hole Web v4.3.2 aka AdminLTE allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease...

CVE-2020-8816

Pi-hole Web v4.3.2 aka AdminLTE allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

USN-4363-1: Linux kernel vulnerabilities

It was discovered that the Serial CAN interface driver in the Linux kernel did not properly initialize data. A local attacker could use this to expose sensitive information kernel memory. CVE-2020-11494 It was discovered that the linux kernel did not properly validate certain mount options to the...

Pi-Hole 4.3.2 DHCP MAC OS Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Pi-Hole DHCP MAC OS Command Execution', 'Description' = %q This exploits a command execution in Pi-Hole MSFLICENSE, 'Author' = 'h00die', msf modu...

Pi-hole 4.4.0 Remote Code Execution

Exploit Title: Pi-hole 4.4.0 - Remote Code Execution Authenticated Date: 2020-05-22 Exploit Author: Photubias Vendor Advisory: 1 https://github.com/pi-hole/AdminLTE Version: Pi-hole . Based and improved on: https://github.com/Frichetten/CVE-2020-11108-PoC/blob/master/cve-2020-11108-rce.py File na...

Pi-Hole 3.3 Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Pi-Hole Whitelist OS Command Execution', 'Description' = %q This exploits a command execution vulnerability in Pi-Hole MSFLICENSE, 'Author' =...

Pi-hole 4.4.0 - Remote Code Execution (Authenticated) Exploit

Exploit for linux platform in category web applications Exploit Title: Pi-hole 4.4.0 - Remote Code Execution Authenticated Date: 2020-05-22 Exploit Author: Photubias Vendor Advisory: 1 https://github.com/pi-hole/AdminLTE Version: Pi-hole . Based and improved on:...

Pi-hole 4.4.0 - Remote Code Execution (Authenticated)

Exploit Title: Pi-hole 4.4.0 - Remote Code Execution Authenticated Date: 2020-05-22 Exploit Author: Photubias Vendor Advisory: 1 https://github.com/pi-hole/AdminLTE Version: Pi-hole . Based and improved on: https://github.com/Frichetten/CVE-2020-11108-PoC/blob/master/cve-2020-11108-rce.py File na...

USN-4367-1: Linux kernel vulnerabilities

It was discovered that the btrfs implementation in the Linux kernel did not properly detect that a block was marked dirty in some situations. An attacker could use this to specially craft a file system image that, when unmounted, could cause a denial of service system crash. CVE-2019-19377 It was...

Pi-Hole - heisenbergCompensator Blocklist OS Command Execution Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Pi-Hole heisenbergCompensator Blocklist OS Command Execution', 'Description' = %q This exploits a command execution in Pi-Hole MSFLICENSE, 'Autho...

Pi-Hole - heisenbergCompensator Blocklist OS Command Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Pi-Hole heisenbergCompensator Blocklist OS Command Execution', 'Description' = %q This exploits a command execution in Pi-Hole MSFLICENSE, 'Autho...

Pi-Hole heisenbergCompensator Blocklist OS Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Pi-Hole heisenbergCompensator Blocklist OS Command Execution', 'Description' = %q This exploits a command execution in Pi-Hole MSFLICENSE, 'Autho...

Pi-Hole DHCP MAC OS Command Execution

This exploits a command execution in Pi-Hole 'Pi-Hole DHCP MAC OS Command Execution', 'Description' = %q This exploits a command execution in Pi-Hole MSFLICENSE, 'Author' = 'h00die', msf module 'François Renaud-Philippon ' original PoC, discovery , 'References' = 'URL',...

Pi-Hole Whitelist OS Command Execution

This exploits a command execution vulnerability in Pi-Hole 'Pi-Hole Whitelist OS Command Execution', 'Description' = %q This exploits a command execution vulnerability in Pi-Hole MSFLICENSE, 'Author' = 'h00die', msf module 'Denis Andzakovic' original PoC, discovery , 'References' = 'URL',...

Pi-Hole heisenbergCompensator Blocklist OS Command Execution

This exploits a command execution in Pi-Hole 'Pi-Hole heisenbergCompensator Blocklist OS Command Execution', 'Description' = %q This exploits a command execution in Pi-Hole = 4.4. A new blocklist is added, and then an update is forced gravity to pull in the blocklist content. PHP content is then...

OSIsoft PI Data Archive Code Issue Vulnerability

OSIsoft PI Data Archive is a file archiving and storage component for PI Server from OSIsoft, USA. The component is mainly used for archiving and storing configuration information and time series data. A code issue vulnerability exists in OSIsoft PI Data Archive versions 2018 and 2018 SP2. A remo...

CVE-2020-6262

The CVE-2020-6262 entry concerns SAP Application Server ABAP (ST-PI) with vulnerable releases before 2008_1_46C, 2008_1_620, 2008_1_640, 2008_1_700, 2008_1_710, 740. The underlying issue is a code injection flaw in Service Data Download that could allow an attacker to inject and execute code with...

Pi-hole code issue vulnerability

Pi-hole is a web-grade ad-blocking application from Pi-hole.Gravity updater is an auto-updating plugin used in it. A code issue vulnerability exists in gravityDownloadBlocklistFromUrl in Gravity updater in Pi-hole 4.4 and prior versions. An attacker can exploit this vulnerability to write a PHP...

Pi-hole Web Interface < 5.0 Multiple Vulnerabilities

The Pi-hole Web Interface previously AdminLTE is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

OSIsoft PI System (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: OSIsoft Equipment: PI System Vulnerabilities: Uncontrolled Search Path Element, Improper Verification of Cryptographic Signature, Incorrect Default Permissions, Uncaught Exception, Null Pointer...