CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

310 matches found

Kitploit•added 2026/10/14 6:00 a.m.•26 views

Exploits

Exploits Original CVEs, exploit PoCs and security advisories by @kmkz · boffsec-services.com · @kmkzsecurity 2026 File| Target| Type| CVSSv3 ---|---|---|--- CVE-2026-22191-SicuroWeb-ATI-chain.txt| SicuroWeb / Beghelli Sicuro24| Advisory 3-CVE chain| 9.3 CVE-2026-22191-POC.py| SicuroWeb / Beghelli...

10CVSS7.7AI score0.9981EPSS

SaveExploits242References30

Kitploit•added 2026/10/11 5:20 p.m.•18 views

CVE-2022-31491

CVE-2022-31491 Metasploit module and PoC files in this repo. Further Information Voltronic Viewpower/Pro and rebrands/derivatives The UPS management software normally allows a properly Authenticated and Authorized user using a web interface to configure the system to run a single OS command of th...

10CVSS6.4AI score0.00798EPSS

SaveExploits1

Kitploit•added 2026/10/11 12:55 p.m.•18 views

CVE-2022-43110

CVE-2022-43110 Further Information Voltronic Viewpower/Pro and rebrands/derivatives The UPS management software is supposed to only allow a properly Authenticated and Authorized admin user using a web interface to configure the system. Due to CWE-425: Direct Request 'Forced Browsing' an...

9.8CVSS6.2AI score0.0066EPSS

SaveExploits0

Rapid7 Vulnerability Database (full)•added 2026/09/04 12:00 a.m.•11 views

CVE-2026-44402: Unrestricted Upload of File with Dangerous Type

Voltronic Power SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi firmware update endpoint that allows remote attackers to execute arbitrary commands as root by uploading a crafted tar archive without valid credentials. Attackers can supply a...

9.8CVSS6.7AI score0.01317EPSS

SaveExploits2References2

Rapid7 Vulnerability Database (full)•added 2026/03/13 12:00 a.m.•7 views

CVE-2026-22192: Missing Authentication for Critical Function

Voltronic Power SNMP Web Pro version 1.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to access privileged management functions by manipulating browser localStorage values. Attackers can modify client-side authentication state to bypass server-side access...

9.9CVSS8.1AI score0.0028EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2026/03/13 12:00 a.m.•6 views

CVE-2026-22199: Improper Limitation of a Pathname to a Restricted Directory

Voltronic Power SNMP Web Pro version 1.1 contains a pre-authentication path traversal vulnerability in the upload.cgi endpoint that allows unauthenticated attackers to read arbitrary files on the device filesystem by supplying directory traversal sequences in the params parameter. Attackers can...

8.7CVSS8.1AI score0.01014EPSS

SaveExploits0References1

RedhatCVE•added 2026/01/09 12:35 p.m.•19 views

CVE-2023-49563

Cross Site Scripting XSS in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a request to the webserver...

6.1CVSS6.6AI score0.00544EPSS

SaveExploits1References1