Resources

Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 12.063 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 150 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Displaying 1 - 25 results out of 12.063

Pentest-Tools.com Vulnerabilities
Name
Detectable with
Detection added
Severity
Exploitable
with Sniper
Nagios XI v5.11.0 - SQL InjectionNetwork Scanner

Medium(6.5)

No
WordPress Core 5.0.0 - Crop-image Shell UploadNetwork Scanner

Medium(6.5)

No
Zhejiang Dahua Smart Cloud Gateway Registration Platform - SQL Injection (CNVD-2024-38747)Network Scanner
N/A
No
Danswer - Insecure Direct Object ReferenceNetwork Scanner

Medium(6.5)

No
Intel Neural Compressor <2.5.0 - SQL InjectionNetwork Scanner

Critical(10)

No
openSIS < 9.1 - SQL InjectionNetwork Scanner

High(8.8)

No
PHP - LFR to Remote Code ExecutionNetwork Scanner

High(7.3)

No
PHPJabbers Food Delivery Script - SQL InjectionNetwork Scanner

Critical(9.8)

No
Hoteldruid v3.0.5 - SQL InjectionNetwork Scanner

Critical(9.8)

No
ECTouch v2 - SQL InjectionNetwork Scanner

Critical(9.8)

No
Revive Adserver 5.4.1 - Cross-Site ScriptingNetwork Scanner

Medium(6.1)

No
Public AWS Bucket multipart uploads listing detectionCloud Scanner
N/A
No
Vendure - Arbitrary File ReadNetwork Scanner

Critical(9.1)

No
PHPJabbers Food Delivery Script v3.0 - SQL InjectionNetwork Scanner

Critical(9.8)

No
PHPJabbers Ticket Support Script v3.2 - Cross-Site ScriptingNetwork Scanner

Medium(5.4)

No
PHPJabbers Make an Offer Widget v1.0 - Cross-Site ScriptingNetwork Scanner

Medium(6.1)

No
GutenKit <= 2.1.0 - Arbitrary File UploadNetwork Scanner

Critical(9.8)

No
PHPJabbers Yacht Listing Script v1.0 - Cross-Site ScriptingNetwork Scanner

Medium(6.1)

No
PHPJabbers Callback Widget v1.0 - Cross-Site ScriptingNetwork Scanner

Medium(6.1)

No
LearnPress < 4.2.5.5 - Cross-Site ScriptingNetwork Scanner

Medium(6.1)

No
PHPJabbers Fundraising Script v1.0 - Cross-Site ScriptingNetwork Scanner

Medium(6.1)

No
WordPress Core - Post Author Email DisclosureNetwork Scanner

Medium(5.3)

No
WordPress Core <=6.2 - Directory TraversalNetwork Scanner

Medium(6.1)

No
Keycloak < 24.0.5 - Broken Access ControlNetwork Scanner

High(8.1)

No
FXServer < v9601 - Information ExposureNetwork Scanner
N/A
No