CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

292 matches found

Kitploit•added 2026/10/25 2:06 p.m.•34 views

Exploits

Exploits Original CVEs, exploit PoCs and security advisories by @kmkz · boffsec-services.com · @kmkzsecurity 2026 File| Target| Type| CVSSv3 ---|---|---|--- CVE-2026-22191-SicuroWeb-ATI-chain.txt| SicuroWeb / Beghelli Sicuro24| Advisory 3-CVE chain| 9.3 CVE-2026-22191-POC.py| SicuroWeb / Beghelli...

10CVSS7.9AI score0.9981EPSS

SaveExploits244References30

Rapid7 Vulnerability Database (full)•added 2026/09/04 12:00 a.m.•14 views

CVE-2026-44402: Unrestricted Upload of File with Dangerous Type

Voltronic Power SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi firmware update endpoint that allows remote attackers to execute arbitrary commands as root by uploading a crafted tar archive without valid credentials. Attackers can supply a...

9.8CVSS6.7AI score0.01317EPSS

SaveExploits2References2

Rapid7 Vulnerability Database (full)•added 2026/03/13 12:00 a.m.•9 views

CVE-2026-22192: Missing Authentication for Critical Function

Voltronic Power SNMP Web Pro version 1.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to access privileged management functions by manipulating browser localStorage values. Attackers can modify client-side authentication state to bypass server-side access...

9.9CVSS8.6AI score0.0028EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2026/03/13 12:00 a.m.•8 views

CVE-2026-22199: Improper Limitation of a Pathname to a Restricted Directory

Voltronic Power SNMP Web Pro version 1.1 contains a pre-authentication path traversal vulnerability in the upload.cgi endpoint that allows unauthenticated attackers to read arbitrary files on the device filesystem by supplying directory traversal sequences in the params parameter. Attackers can...

8.7CVSS8.1AI score0.01014EPSS

SaveExploits0References1

RedhatCVE•added 2026/01/09 12:35 p.m.•21 views

CVE-2023-49563

Cross Site Scripting XSS in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a request to the webserver...

6.1CVSS7.1AI score0.00544EPSS

SaveExploits1References1