Skip to main content
HomePentest-Tools.com Logo
Start for free

Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.267 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 195 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Displaying 1 - 25 results out of 17.267

Pentest-Tools.com Vulnerabilities
Name
Detectable with
Detection added
CVSSv3
EPSS Score
EPSS Percentile
Exploitable
with Sniper
Nuxeo <10.3 - Remote Code ExecutionNetwork Scanner

High

N/A
N/A
No
Odoo - Cross-Site ScriptingNetwork Scanner

Medium

N/A
N/A
No
VICIdial Sensitive Information DisclosureNetwork Scanner

High

N/A
N/A
No
AfterLogic Aurora and WebMail Pro < 7.7.9 - Full Path DisclosureNetwork Scanner

Low

N/A
N/A
No
Temenos Transact - Cross-Site ScriptingNetwork Scanner

High

N/A
N/A
No
Nodogsplash - Directory TraversalNetwork Scanner

High

N/A
N/A
No
SolarView Compact 6.00 - 'pow' Cross-Site ScriptingNetwork Scanner

High

N/A
N/A
No
My Calendar < 3.7.9 - Unauthenticated SQL Injection
CVE-2026-6854
Network Scanner

High(7.5)

0.010.2No
CaseAware a360inc - Cross-Site ScriptingNetwork Scanner

Medium

N/A
N/A
No
GeoServer jsonArrayContains CQL Filter - SQL Injection
CVE-2023-25157
Network Scanner

Critical(9.8)

0.861No
GestSup - Cross-Site ScriptingNetwork Scanner

High

N/A
N/A
No
ShowDoc - Remote Code Execution
CVE-2025-0520
Network Scanner

Critical(9.4)

0.020.62No
Harman Media Suite <= 4.2.0 - Local File DisclosureNetwork Scanner

High

N/A
N/A
No
Cybersecurity Infrastructure Security Agency (CISA)SimpleHelp <= 5.5.7 - Privilege Escalation
CVE-2024-57726
Network Scanner

Critical(9.9)

0.090.95No
GestSup - Account TakeoverNetwork Scanner

Critical

N/A
N/A
No
Newsletters < 4.16 - Unauthenticated SSRF via SNS Bounce Handler
CVE-2026-16268
Network Scanner

Medium(5.3)

0.010.1No
TP-LINK WR840N v6 up to 0.9.1 4.16 - Improper AuthenticationNetwork Scanner

Critical

N/A
N/A
No
SpringBlade - Information LeakageNetwork Scanner

High

N/A
N/A
No
IBM WebSphere HCL Digital Experience - Server-Side Request ForgeryNetwork Scanner

High

N/A
N/A
No
UNA CMS <= 14.0.0-RC4 - PHP Object InjectionNetwork Scanner

Critical

N/A
N/A
No
Monitorr Services Configuration - Arbitrary File UploadNetwork Scanner

High

N/A
N/A
No
LG NAS Devices - Remote Code ExecutionNetwork Scanner

Critical

N/A
N/A
No
WordPress Simple File List <=4.2.2 - Remote Code ExecutionNetwork Scanner

Critical

N/A
N/A
No
Temenos T24 R20 - Cross-Site ScriptingNetwork Scanner

Medium

N/A
N/A
No
SolarView Compact 6.00 - 'time_begin' Cross-Site ScriptingNetwork Scanner

Medium

N/A
N/A
No