{"vulnerability": "CVE-2022-4719", "sightings": [{"uuid": "d748c5de-bf7f-4886-bb98-a45c9ebd101a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47197", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10284", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47197\n\ud83d\udd25 CVSS Score: 9 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow non-administrator users to inject arbitrary Javascript in posts, which allow privilege escalation to administrator via XSS. To trigger this vulnerability, an attacker can send an HTTP request to inject Javascript in a post to trick an administrator into visiting the post.A stored XSS vulnerability exists in the `codeinjection_foot` for a post.\n\ud83d\udccf Published: 2023-01-19T17:02:15.814Z\n\ud83d\udccf Modified: 2025-04-03T17:00:32.324Z\n\ud83d\udd17 References:\n1. https://talosintelligence.com/vulnerability_reports/TALOS-2022-1686", "creation_timestamp": "2025-04-03T17:35:39.000000Z"}, {"uuid": "d0517a5c-8b83-40b8-bb5f-a7fc8ce53522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4719", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11159", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4719\n\ud83d\udd25 CVSS Score: 5.7 (cvssV3_0, Vector: CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L)\n\ud83d\udd39 Description: Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5.\n\ud83d\udccf Published: 2022-12-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T20:39:58.256Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/9f746881-ad42-446b-9b1d-153391eacc09\n2. https://github.com/ikus060/rdiffweb/commit/bc4bed89affcba71251fe54ed10639da9d392c1d", "creation_timestamp": "2025-04-09T20:48:22.000000Z"}, {"uuid": "b7db6320-4616-492a-976f-f7beb535baf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47191", "type": "published-proof-of-concept", "source": "https://t.me/ETHICALHACKERSCOMMUNITY2/2163", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2023-03-06T18:07:35.000000Z"}, {"uuid": "a75cabda-ff42-4fa1-8467-2d9f865de2f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "published-proof-of-concept", "source": "https://t.me/ETHICALHACKERSCOMMUNITY2/2163", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2023-03-06T18:07:35.000000Z"}, {"uuid": "0590e9b3-47bb-4329-9c13-d556845068a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47190", "type": "published-proof-of-concept", "source": "https://t.me/ETHICALHACKERSCOMMUNITY2/2163", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2023-03-06T18:07:35.000000Z"}, {"uuid": "9a136101-bde0-4f9e-a805-874dc94d6291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4719", "type": "seen", "source": "https://t.me/cibsecurity/55415", "content": "\u203c CVE-2022-4719 \u203c\n\nBusiness Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-27T18:13:37.000000Z"}, {"uuid": "67903e2c-41ac-4fc6-9005-d6c83f372c4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47195", "type": "seen", "source": "https://t.me/cibsecurity/56719", "content": "\u203c CVE-2022-47195 \u203c\n\nAn insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow non-administrator users to inject arbitrary Javascript in posts, which allow privilege escalation to administrator via XSS. To trigger this vulnerability, an attacker can send an HTTP request to inject Javascript in a post to trick an administrator into visiting the post.A stored XSS vulnerability exists in the `facebook` field for a user.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-19T20:22:07.000000Z"}, {"uuid": "b45a3857-e7e8-4024-8f18-3776d41195b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47194", "type": "seen", "source": "https://t.me/cibsecurity/56732", "content": "\u203c CVE-2022-47194 \u203c\n\nAn insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow non-administrator users to inject arbitrary Javascript in posts, which allow privilege escalation to administrator via XSS. To trigger this vulnerability, an attacker can send an HTTP request to inject Javascript in a post to trick an administrator into visiting the post.A stored XSS vulnerability exists in the `twitter` field for a user.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-19T20:22:28.000000Z"}, {"uuid": "31f56c0f-e1c3-47c0-a1cd-b0e8d89b62b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47197", "type": "seen", "source": "https://t.me/cibsecurity/56726", "content": "\u203c CVE-2022-47197 \u203c\n\nAn insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow non-administrator users to inject arbitrary Javascript in posts, which allow privilege escalation to administrator via XSS. To trigger this vulnerability, an attacker can send an HTTP request to inject Javascript in a post to trick an administrator into visiting the post.A stored XSS vulnerability exists in the `codeinjection_foot` for a post.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-19T20:22:19.000000Z"}, {"uuid": "cab9db07-d4b1-4546-a7d0-b66f23e70062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47190", "type": "seen", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-01T20:01:00.964845Z"}, {"uuid": "a25274d0-5fc2-4bf2-802a-041dfaa6dce5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47191", "type": "seen", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-01T20:01:00.685675Z"}, {"uuid": "0b08c5ca-f9f5-4ab2-9974-fb7fa47f0235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47191", "type": "seen", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-01T20:01:03.104506Z"}, {"uuid": "36b7c374-c809-4909-a6d5-0f09bbf76de2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "seen", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-01T20:01:01.092021Z"}, {"uuid": "b0d56788-f3ba-4377-a246-be736b9289ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47190", "type": "seen", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-01T20:01:03.201527Z"}, {"uuid": "e4200020-48ef-485d-9945-77385fa883a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "seen", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-01T20:01:03.351618Z"}, {"uuid": "301a0b47-d9d3-4693-b894-cfeb1e8ea8a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47191", "type": "seen", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-01T20:01:03.473018Z"}, {"uuid": "cc54ac9e-3c51-472d-8bde-d18ee3a1f4e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47190", "type": "seen", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-01T20:01:03.634061Z"}, {"uuid": "eb618431-689d-4d06-8362-f632c90e29c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "seen", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-01T20:01:03.769638Z"}, {"uuid": "9c7d646c-bc4d-4796-ac08-45878d2525f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47191", "type": "seen", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-02T01:01:21.372257Z"}, {"uuid": "9d617035-8609-4d25-a72e-b9000d068e4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47191", "type": "seen", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-02T01:01:23.328714Z"}, {"uuid": "c718b856-4f3a-4a46-b9ff-29c49d28179e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "seen", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-02T01:01:21.729693Z"}, {"uuid": "30a88d6f-dfda-4afb-bffa-adb6f2f0bf7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47190", "type": "seen", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-02T01:01:21.547359Z"}, {"uuid": "9ef81cdd-f196-4e64-9fdf-3259a39fa79e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47190", "type": "seen", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-02T01:01:23.043679Z"}, {"uuid": "3af541af-9a8c-4e42-a22b-5f4fbf0bf53d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47191", "type": "seen", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-02T01:01:22.947666Z"}, {"uuid": "c20ec083-c730-4614-86dc-65fbd2c08590", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "seen", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-02T01:01:23.178988Z"}, {"uuid": "16b0af48-c0d8-4900-9b38-ebf7d097c9de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47190", "type": "seen", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-02T01:01:23.528907Z"}, {"uuid": "02498175-d36f-491a-b517-5090b2260125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "seen", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-02T01:01:23.666975Z"}, {"uuid": "7eacdea1-f802-4edc-9249-b240344dcc4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-04T16:00:04.285941Z"}, {"uuid": "0d56fbea-9f5f-49fe-8da2-7a89e444ad4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47190", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-04T16:00:04.419788Z"}, {"uuid": "e9f385e0-ba94-4991-aa4d-2058c71b35df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47191", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-04T16:00:04.572895Z"}, {"uuid": "b0b18a2d-b324-4a70-899c-b721fab49857", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-04T20:00:04.404861Z"}, {"uuid": "9966cd78-ec2e-4fc4-a522-6e01640c50f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47190", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-04T20:00:04.554452Z"}, {"uuid": "b9309335-2689-4631-be1b-850731599fd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47191", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-04T20:00:04.703875Z"}, {"uuid": "a50219e3-db1e-4404-b7b9-1b21d212444e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-04T20:00:04.874763Z"}, {"uuid": "8862ed2c-c781-4400-ab33-d0e675b655e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47190", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-04T20:00:05.021203Z"}, {"uuid": "664377a9-f9f9-4ebe-ae3d-b17819e594ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47191", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-04T20:00:05.166860Z"}, {"uuid": "fdd5be42-40d5-4fc1-87cb-fbdef90f9cfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-05T01:00:16.309804Z"}, {"uuid": "424b0fdb-20ec-439b-9491-70bf44143766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47190", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-05T01:00:16.989287Z"}, {"uuid": "5956bea2-063d-47e3-bc86-d015ccf5f837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47191", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-05T01:00:17.133351Z"}, {"uuid": "8a9e6235-b688-4492-8f71-23da3664e2b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-05T01:00:17.288992Z"}, {"uuid": "83420894-2298-4cce-b159-364c9d17517d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47190", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-05T01:00:17.492341Z"}, {"uuid": "a29152f3-777f-4965-bee0-eddbaed3f35c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47191", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-05T01:00:17.638497Z"}, {"uuid": "d42f2cf5-fa47-476a-b6e3-f300bca04839", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-05T01:00:22.700567Z"}, {"uuid": "447a08ec-9bb0-49d5-9ce6-dc4ce9acc89b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47190", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-05T01:00:22.850511Z"}, {"uuid": "096265e1-5319-4b90-adcd-543bd14e9aaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47191", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-05T01:00:23.409524Z"}]}