CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

292 matches found

Kitploit•added 2026/09/29 9:06 a.m.•19 views

Exploits

Exploits CVEs originales, PoCs de exploits y avisos de seguridad por @kmkz · boffsec-services.com · @kmkzsecurity 2026 Archivo| Objetivo| Tipo| CVSSv3 ---|---|---|--- CVE-2026-22191-SicuroWeb-ATI-chain.txt| SicuroWeb / Beghelli Sicuro24| Aviso cadena de 3 CVE| 9.3 CVE-2026-22191-POC.py| SicuroWeb...

10CVSS8.5AI score0.83524EPSS

SaveExploits114References27

Rapid7 Vulnerability Database (full)•added 2026/09/04 12:00 a.m.•2 views

CVE-2026-44402: Unrestricted Upload of File with Dangerous Type

Voltronic Power SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi firmware update endpoint that allows remote attackers to execute arbitrary commands as root by uploading a crafted tar archive without valid credentials. Attackers can supply a...

9.8CVSS6.8AI score0.01317EPSS

SaveExploits2References2

Rapid7 Vulnerability Database (full)•added 2026/03/13 12:00 a.m.•2 views

CVE-2026-22192: Missing Authentication for Critical Function

Voltronic Power SNMP Web Pro version 1.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to access privileged management functions by manipulating browser localStorage values. Attackers can modify client-side authentication state to bypass server-side access...

9.9CVSS5.9AI score0.0027EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2026/03/13 12:00 a.m.•0 views

CVE-2026-22199: Improper Limitation of a Pathname to a Restricted Directory

Voltronic Power SNMP Web Pro version 1.1 contains a pre-authentication path traversal vulnerability in the upload.cgi endpoint that allows unauthenticated attackers to read arbitrary files on the device filesystem by supplying directory traversal sequences in the params parameter. Attackers can...

8.7CVSS5.9AI score0.00976EPSS

SaveExploits0References1

RedhatCVE•added 2026/01/09 12:35 p.m.•15 views

CVE-2023-49563

Cross Site Scripting XSS in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a request to the webserver...

6.1CVSS6.6AI score0.00544EPSS

SaveExploits1References1