{"uuid": "36b7c374-c809-4909-a6d5-0f09bbf76de2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "seen", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-01T20:01:01.092021Z"}