Resources

Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 15.084 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 163 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Displaying 1 - 25 results out of 15.084

Pentest-Tools.com Vulnerabilities
Name	Detectable with	Detection added	Severity	Exploitable with Sniper
vBulletin replaceAdTemplate - Remote Code Execution	Network Scanner	May 25, 2025	Critical	No
TP-Link Archer AX21 (AX1800) - Unauthenticated Command Injection CVE-2023-1389	Network Scanner	May 23, 2025	Critical(9.8)	No
MagnusBilling Alarm Module - Cross-Site Scripting CVE-2025-2610	Network Scanner	May 23, 2025	High(7.6)	No
Versa Concerto API Path Based - Authentication Bypass CVE-2025-34027	Network Scanner	May 23, 2025	Critical	No
Emby Installation Page - Exposure	Network Scanner	May 23, 2025	High	No
MagnusBilling - Default Login	Network Scanner	May 23, 2025	High	No
MagnusBilling Login Logs - Cross-Site Scripting CVE-2025-2609	Network Scanner	May 23, 2025	High(8.2)	No
Usermin 2.100 - Username Enumeration CVE-2024-44762	Network Scanner	May 23, 2025	Medium(5.3)	No
Pandora FMS <=7.0NG.722 - Remote Code Execution CVE-2018-11222	Network Scanner	May 23, 2025	High(7.5)	No
Zoho ManageEngine OpManager - SQL Injection CVE-2018-17283	Network Scanner	May 23, 2025	High(7.5)	No
PublishPress Capabilities < 2.3.3 - Cross-Site Scripting	Network Scanner	May 23, 2025	Medium	No
Jordy Meow AI Engine - Unrestricted File Upload CVE-2023-51409	Network Scanner	May 23, 2025	Critical(9.8)	No
Versa Concerto Actuator Endpoint - Authentication Bypass CVE-2025-34026	Network Scanner	May 23, 2025	Critical	No
MapSVG < 6.2.20 - Unauthenticated SQLi CVE-2022-0592	Network Scanner	May 23, 2025	Critical(9.8)	No
Grafana - XSS / Open Redirect / SSRF via Client Path Traversal CVE-2025-4123	Network Scanner	May 23, 2025	High(7.6)	No
Dell KACE Systems Management Appliance (K1000) 6.4.120756 - Remote Code Execution CVE-2019-20504	Network Scanner	May 23, 2025	Critical(9.8)	No
Youzify < 1.2.0 - Unauthenticated SQLi CVE-2022-1950	Network Scanner	May 23, 2025	Critical(9.8)	No
Pandora v7.0NG.777.3 - Remote Code Execution CVE-2024-11320	Network Scanner	May 23, 2025	Critical(9.8)	No
Roxy-WI - Remote Code Execution CVE-2022-31161	Network Scanner	May 23, 2025	Critical(9.8)	No
DrayTek Vigor - Command Injection CVE-2024-12987	Network Scanner	May 23, 2025	Critical(9.8)	No
PRTG Network Monitor - Local File Inclusion CVE-2018-19410	Network Scanner	May 23, 2025	Critical(9.8)	No
OpenMRS Platform < 2.24.0 - Insecure Object Deserialization CVE-2018-19276	Network Scanner	May 23, 2025	Critical(9.8)	No
LearnPress Plugin < 4.2.0 - Unauthenticated Time-Based Blind SQLi CVE-2022-45808	Network Scanner	May 23, 2025	Critical(9.9)	No
Roxy-WI - Remote Code Execution CVE-2022-31126	Network Scanner	May 22, 2025	Critical(9.8)	No
YouPHPTube Encoder - Arbitrary File Write CVE-2019-5128	Network Scanner	May 22, 2025	Critical(9.8)	No