Pi-hole Code Injection Vulnerability

Pi-hole is a web-grade ad-blocking application from Pi-hole. A code injection vulnerability exists in piholedhcp in Pi-hole 5.0 and prior versions. The vulnerability stems from a network system or product not properly filtering specific elements of the code segment constructed from external input...

CVE-2020-14971

CVE-2020-14971 affects Pi-hole up to version 5.0, enabling code injection in the piholedhcp component (Static DHCP Leases) by tampering Teleporter backup archives. An attacker can request a limited backup via teleporter.php, receive a .tar.gz, modify the host parameter in dnsmasq.d files inside t...