Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.614 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 223 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Displaying 1 - 25 results out of 17.614

Pentest-Tools.com Vulnerabilities
Name	Detectable with	Detection added	CVSSv3	EPSS Score	EPSS Percentile	Exploitable with Sniper
Zulip Server 11.0 - 12.1 - Unauthenticated Custom Profile Field Disclosure CVE-2026-115574	Network Scanner	Nov 6, 2026	Medium(5.3)	0.01	0.54	No
VikRentCar <= 1.4.10 - Cross-Site Scripting CVE-2026-116548	Network Scanner	Nov 6, 2026	High(7.2)	0.01	0.45	No
EventPrime < 4.3.6.1 - Unauthenticated Pending Post Disclosure CVE-2026-118523	Network Scanner	Nov 6, 2026	Medium(5.3)	0.01	0.41	No
Newsletters < 4.15 - Unauthenticated PHP Object Injection via Subscriber Custom Field CVE-2026-12583	Network Scanner	Nov 6, 2026	High(8.1)	0.03	0.82	No
ComfyUI-Manager < 3.39.2 - CRLF Configuration Injection CVE-2026-22777	Network Scanner	Nov 6, 2026	High(7.5)	0.01	0.59	No
WordPress Welcart e-Commerce < 2.12.7 - Cross-Site Scripting CVE-2026-120597	Network Scanner	Nov 6, 2026	Medium(4.3)	0.01	0.49	No
ape-volo-admin <= 3.5.2 - Authentication Bypass via Hardcoded JWT Signing Key CVE-2026-120442	Network Scanner	Nov 6, 2026	Critical(9.8)	0.02	0.78	No
WordPress Better Search < 4.5.3 - Unauthenticated Arbitrary Post Type Content Disclosure CVE-2026-119495	Network Scanner	Nov 6, 2026	Medium(5.3)	0.01	0.49	No
OpenSSH musl - Authentication Bypass (CVE-2026-123158 - *sshole) CVE-2026-123158	Network Scanner	Nov 5, 2026	High(8.1)	0.01	0.63	Yes
Jpom 2.10.0-2.11.12 - Authentication Bypass CVE-2026-120201	Network Scanner	Nov 5, 2026	Critical(9.8)	0.03	0.83	No
Langflow 1.8.3 and 1.9.0 - Authenticated MCP Stdio Command Execution CVE-2026-105740	Network Scanner	Nov 4, 2026	Critical(9.9)	0.04	0.91	No
Laravel TokenGuard - Authentication Bypass CVE-2026-114509	Network Scanner	Nov 4, 2026	Critical(9.2)	0.02	0.8	No
JBoss AS/EAP Admin Console - Default Login	Network Scanner	Nov 4, 2026	Critical	N/A	N/A	No
OpenPanel - Unauthenticated Bull Board Queue Dashboard CVE-2026-116817	Network Scanner	Nov 4, 2026	Medium(6.5)	0.01	0.48	No
Plex Media Server < 1.43.3.10861 - SSRF via Transcoder CVE-2026-96655	Network Scanner	Nov 4, 2026	Medium(5.3)	0.11	0.96	No
madong-admin-saas <= 5.1.4 - Unauthenticated Platform Tenant Management Access CVE-2026-120446	Network Scanner	Nov 4, 2026	High(8.8)	0.02	0.65	No
Drupal Commerce Core < 3.3.13 / < 8.x-2.41 - Guest Cart Admin Access Bypass CVE-2026-118539	Network Scanner	Nov 4, 2026	Critical(6.5)	0.01	0.53	No
Prefect Server Unauthenticated API Exposure	Network Scanner	Nov 4, 2026	Medium	N/A	N/A	No
SUSE Rancher - Stored XSS via Unauthenticated Settings Override CVE-2026-88804	Network Scanner	Nov 4, 2026	Critical(9.6)	0.02	0.65	No
Adobe Commerce/Magento <= 2.4.9 - StyleSmuggler Unauthenticated RCE via SSTI CVE-2026-75650	Network Scanner	Nov 4, 2026	Critical(10)	1	1	No
PIAF-HMS ec.php - SQL Injection CVE-2026-54419	Network Scanner	Nov 4, 2026	Critical(9.8)	0.02	0.75	No
bWAPP Default Login	Network Scanner	Nov 3, 2026	Critical	N/A	N/A	No
BeyondTrust Remote Support <= 26.2.3 - Origin Validation File Upload CVE-2026-102764	Network Scanner	Nov 3, 2026	Critical(9.3)	0.78	1	No
Typemill CMS < 2.23.0 - Cross-Site Scripting CVE-2026-53468	Network Scanner	Nov 3, 2026	Medium(4.6)	0.01	0.37	No
MLflow 3.10.0-3.16.1 - Arbitrary File Read CVE-2026-116690	Network Scanner	Nov 3, 2026	High(7.5)	0.02	0.79	No

Vulnerability & Exploit Database

One of EMEA's fastest-growing tech companies

Independently audited company-wide ISMS

50,000+ security folks are here. Are you?

Security leaders trust what they can prove