Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.666 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 223 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Displaying 1 - 25 results out of 17.666

Pentest-Tools.com Vulnerabilities
Name	Detectable with	Detection added	CVSSv3	EPSS Score	EPSS Percentile	Exploitable with Sniper
Imperia CMS SiteActive <=11.5.4 - Unauthenticated SSTI Remote Code Execution CVE-2026-110355	Network Scanner	Nov 14, 2026	Critical(9.8)	N/A	N/A	No
Plex Media Server < 1.43.3.10861 - Server Side Request Forgery CVE-2026-96654	Network Scanner	Nov 14, 2026	Medium(6.5)	0.13	0.97	No
CryptoPayment Gateway <= 1.2.2 - Unauthenticated Broken Access Control CVE-2026-81648	Network Scanner	Nov 14, 2026	Critical(10)	0.03	0.83	No
PrivateGPT - Server-Side Request Forgery via UriArtifact CVE-2026-116000	Network Scanner	Nov 14, 2026	High(7.3)	0.01	0.52	No
Traefik - Authentication Bypass - Version CVE-2026-65600	Network Scanner	Nov 14, 2026	High(7.5)	0.02	0.64	No
ChatWiki < 2.10.0 - Cross-Tenant Document Page Disclosure CVE-2026-124027	Network Scanner	Nov 14, 2026	High(7.5)	0.02	0.75	No
dagu <= 2.3.0 - Path Traversal via Encoded Slashes in DAG Name CVE-2026-33344	Network Scanner	Nov 14, 2026	High(8.1)	0.02	0.75	No
FreeSWITCH Event Socket - Default Credentials (ClueCon) CVE-2019-19492	Network Scanner	Nov 14, 2026	Critical(9.8)	0.65	1	No
Plex Media Server < 1.43.3.10861 - Arbitrary File Write to Code Execution CVE-2026-96656	Network Scanner	Nov 14, 2026	High(7.2)	0.2	0.98	No
Mingsoft MCMS 5.2.7 - SQL Injection CVE-2022-30047	Network Scanner	Nov 13, 2026	Critical(9.8)	0.05	0.93	No
Fortinet FortiSandbox - Path Traversal Authentication Bypass CVE-2026-39813	Network Scanner	Nov 13, 2026	Critical(9.8)	0.45	0.99	No
MajorDoMo - OS Command Injection via Race Condition CVE-2026-27175	Network Scanner	Nov 13, 2026	Critical(9.8)	0.24	0.98	No
vulnerability-operator < 0.28.16 - Unauthenticated Report Directory Listing CVE-2026-64858	Network Scanner	Nov 13, 2026	Medium(5.3)	0.01	0.62	No
Apache bRPC Heap Profiler - Remote Command Injection CVE-2025-60021	Network Scanner	Nov 13, 2026	Critical(9.8)	0.56	1	No
Tinyproxy < 1.11.2 - Use After Free in HTTP Connection Header CVE-2023-49606	Network Scanner	Nov 13, 2026	Critical(9.8)	0.81	1	No
openDCIM - Unauthenticated SQL Injection to OS Command Injection CVE-2026-28517	Network Scanner	Nov 13, 2026	Critical(9.8)	0.11	0.96	No
SourceCodester Stock Management System 1.0 - SQL Injection Authentication Bypass CVE-2025-4283	Network Scanner	Nov 13, 2026	Critical(9.8)	0.03	0.83	No
SolarWinds Serv-U - Denial of Service CVE-2026-28318	Network Scanner	Nov 13, 2026	High(7.5)	0.88	1	No
FUXA <= 1.2.8 - Authentication Bypass to Remote Code Execution CVE-2025-69985	Network Scanner	Nov 13, 2026	Critical(9.8)	0.15	0.97	No
NotificationX < 3.3.7 - Unauthenticated Notification Preview CVE-2026-119302	Network Scanner	Nov 13, 2026	High(6.5)	0.01	0.54	No
TYPO3 Caddy Extension < 7.2.10 - Cross-Site Scripting CVE-2017-5963	Network Scanner	Nov 13, 2026	Medium(6.1)	0.02	0.72	No
Mingsoft MCMS 5.1 - SQL Injection CVE-2021-44868	Network Scanner	Nov 13, 2026	Critical(9.8)	0.05	0.93	No
Apache HTTP Server - Race Condition CVE-2026-119618	Network Scanner	Nov 12, 2026	Critical(9.8)	0.02	0.76	No
Simple 301 Redirects by BetterLinks <= 2.0.3 - Unauthenticated Arbitrary Redirect Import CVE-2021-24353	Network Scanner	Nov 12, 2026	High(8.8)	0.02	0.76	No
FUXA - Authorization Bypass CVE-2026-25939	Network Scanner	Nov 12, 2026	Critical(9.1)	0.25	0.98	No

Vulnerability & Exploit Database

One of EMEA's fastest-growing tech companies

Independently audited company-wide ISMS

50,000+ security folks are here. Are you?

Security leaders trust what they can prove