{"metadata": {"vulnerability": "CVE-2022-47187", "count": 25, "kinds": {"milestone": 4, "sighting": 8, "kev": 0, "other": 13}}, "data": [{"timestamp": "2022-12-12T17:08:47.302Z", "date_only": false, "value": "2022-12-12T17:08:47.302Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-47187", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-03-02T23:00:00Z", "date_only": false, "value": "2023-03-02T23:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / INCIBE", "record": "CVE-2022-47187", "field": "containers.cna.datePublic"}, {"timestamp": "2023-03-06T18:07:35Z", "date_only": false, "value": "2023-03-06T18:07:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ETHICALHACKERSCOMMUNITY2/2163", "record": "CVE-2022-47187", "field": "creation_timestamp", "uuid": "683f008e-39e4-40b7-8f3f-e8de6e389a3a", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "url": "https://t.me/ETHICALHACKERSCOMMUNITY2/2163"}, {"timestamp": "2023-09-28T13:30:27.188Z", "date_only": false, "value": "2023-09-28T13:30:27.188Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-47187", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-09-28T13:30:27.188Z", "date_only": false, "value": "2023-09-28T13:30:27.188Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / INCIBE", "record": "CVE-2022-47187", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-09-28T14:15:00Z", "date_only": false, "value": "2023-09-28T14:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-47187", "record": "GSD-2022-47187", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-09-28T14:15:17Z", "date_only": false, "value": "2023-09-28T14:15:17Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-HQQ7-2CJ4-XMJF", "record": "GHSA-HQQ7-2CJ4-XMJF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-09-28T14:15:17.927Z", "date_only": false, "value": "2023-09-28T14:15:17.927", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-47187", "record": "FKIE_CVE-2022-47187", "field": "published"}, {"timestamp": "2023-09-28T15:30:17Z", "date_only": false, "value": "2023-09-28T15:30:17Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HQQ7-2CJ4-XMJF", "record": "GHSA-HQQ7-2CJ4-XMJF", "field": "published"}, {"timestamp": "2023-10-02T20:45:00Z", "date_only": false, "value": "2023-10-02T20:45Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-47187", "record": "GSD-2022-47187", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-10-17T01:10:29Z", "date_only": false, "value": "2023-10-17T01:10:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/71195", "record": "CVE-2022-47187", "field": "creation_timestamp", "uuid": "443d4f62-a44d-4205-9dea-2cb9ba37639d", "content": "\u203c CVE-2022-47187 \u203c\n\nThere is a file upload XSS vulnerability in Generex CS141 below 2.06 version. The web application allows file uploading, making it possible to upload a file with HTML content. When HTML files are allowed, XSS payload can be injected into the uploaded file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/71195"}, {"timestamp": "2023-12-13T01:19:35.867Z", "date_only": false, "value": "2023-12-13T01:19:35.867127Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-47187", "record": "GSD-2022-47187", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-04-04T07:56:53Z", "date_only": false, "value": "2024-04-04T07:56:53Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HQQ7-2CJ4-XMJF", "record": "GHSA-HQQ7-2CJ4-XMJF", "field": "modified"}, {"timestamp": "2024-08-03T14:47:29.378Z", "date_only": false, "value": "2024-08-03T14:47:29.378Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-47187", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-23T18:52:27.863Z", "date_only": false, "value": "2024-09-23T18:52:27.863483Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-47187", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-09-23T18:52:27.863Z", "date_only": false, "value": "2024-09-23T18:52:27.863483Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-47187", "record": "FKIE_CVE-2022-47187", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-09-23T18:54:02.859Z", "date_only": false, "value": "2024-09-23T18:54:02.859Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-47187", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-09-23T18:54:02.859Z", "date_only": false, "value": "2024-09-23T18:54:02.859Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-47187", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T05:13:13.827Z", "date_only": false, "value": "2026-06-17T05:13:13.827", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-47187", "record": "FKIE_CVE-2022-47187", "field": "lastModified"}, {"timestamp": "2026-09-01T20:01:01.280Z", "date_only": false, "value": "2026-09-01T20:01:01.280442Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/96279", "record": "CVE-2022-47187", "field": "creation_timestamp", "uuid": "4846108c-104a-4f0f-8666-1a0c29629494", "url": "https://t.me/hacking_Attack/96279"}, {"timestamp": "2026-09-01T20:01:03.556Z", "date_only": false, "value": "2026-09-01T20:01:03.556069Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/93356", "record": "CVE-2022-47187", "field": "creation_timestamp", "uuid": "7a0c0a37-531e-43d4-85fd-7e0cb7f8fc72", "url": "https://t.me/hacking_Attack/93356"}, {"timestamp": "2026-09-01T20:01:03.883Z", "date_only": false, "value": "2026-09-01T20:01:03.883665Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/93302", "record": "CVE-2022-47187", "field": "creation_timestamp", "uuid": "7a241333-2165-443b-9945-9e1700ef50c6", "url": "https://t.me/hacking_Attack/93302"}, {"timestamp": "2026-09-04T16:00:04.187Z", "date_only": false, "value": "2026-09-04T16:00:04.187573Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/96279", "record": "CVE-2022-47187", "field": "creation_timestamp", "uuid": "07b39c21-e656-4702-bccf-fb32539eceed", "url": "https://t.me/hacking_Attack/96279"}, {"timestamp": "2026-09-04T20:00:04.297Z", "date_only": false, "value": "2026-09-04T20:00:04.297496Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/93302", "record": "CVE-2022-47187", "field": "creation_timestamp", "uuid": "d40ed200-1d07-4569-8563-ca5505da96ff", "url": "https://t.me/hacking_Attack/93302"}, {"timestamp": "2026-09-04T20:00:04.788Z", "date_only": false, "value": "2026-09-04T20:00:04.788193Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/93356", "record": "CVE-2022-47187", "field": "creation_timestamp", "uuid": "4f837fdf-b8b6-4bd2-8fda-aaa9a11bf2f1", "url": "https://t.me/hacking_Attack/93356"}]}