{"vulnerability": "CVE-2022-47192", "sightings": [{"uuid": "a75cabda-ff42-4fa1-8467-2d9f865de2f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "published-proof-of-concept", "source": "https://t.me/ETHICALHACKERSCOMMUNITY2/2163", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2023-03-06T18:07:35.000000Z"}, {"uuid": "36b7c374-c809-4909-a6d5-0f09bbf76de2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "seen", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-01T20:01:01.092021Z"}, {"uuid": "e4200020-48ef-485d-9945-77385fa883a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "seen", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-01T20:01:03.351618Z"}, {"uuid": "eb618431-689d-4d06-8362-f632c90e29c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "seen", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-01T20:01:03.769638Z"}, {"uuid": "c718b856-4f3a-4a46-b9ff-29c49d28179e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "seen", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-02T01:01:21.729693Z"}, {"uuid": "c20ec083-c730-4614-86dc-65fbd2c08590", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "seen", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-02T01:01:23.178988Z"}, {"uuid": "02498175-d36f-491a-b517-5090b2260125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "seen", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-02T01:01:23.666975Z"}]}