Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.445 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 199 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Displaying 1 - 25 results out of 17.445

Pentest-Tools.com Vulnerabilities
Name	Detectable with	Detection added	CVSSv3	EPSS Score	EPSS Percentile	Exploitable with Sniper
Blue Angel Software Suite (5V Technologies) - OS Command Injection CVE-2025-34033	Network Scanner	Sep 24, 2026	High(8.8)	0.04	0.9	No
9router <=0.5.4 - Authentication Bypass CVE-2026-56681	Network Scanner	Sep 24, 2026	High(7.3)	0.01	0.44	No
Ray < 2.52.0 - Remote Code Execution CVE-2025-62593	Network Scanner	Sep 24, 2026	Critical(9.8)	0.17	0.97	No
SimpleHelp <= 5.5.7 - Arbitrary File Upload CVE-2024-57728	Network Scanner	Sep 24, 2026	High(7.2)	0.07	0.94	No
Asgaros Forum < 3.2.0 - SQL Injection CVE-2025-11452	Network Scanner	Sep 24, 2026	High(7.5)	0.01	0.33	No
WordPress Core - PHP Template Path Traversal CVE-2026-87902	Network Scanner	Sep 24, 2026	Critical(9.2)	0.01	0.36	No
NeuVector - Information Disclosure CVE-2026-25703	Network Scanner	Sep 24, 2026	High(7.3)	0.01	0.14	No
Bookly <=28.1 - IDOR Unauthenticated Sensitive Data Access CVE-2026-89063	Network Scanner	Sep 23, 2026	High(8.2)	0.01	0.34	No
Strapi <=5.36.x - Admin Credential Enumeration CVE-2026-27886	Network Scanner	Sep 22, 2026	Critical(9.2)	0.02	0.79	No
PowerDNS Authoritative Server Monitor - Unauthenticated Exposure	Network Scanner	Sep 22, 2026	Medium	N/A	N/A	No
AI Copilot Content Generator <=1.4.6 - Unauthenticated Task Data Exposure CVE-2026-6639	Network Scanner	Sep 22, 2026	High(7.5)	0.02	0.66	No
OpenID Connect - Unsigned (alg none) ID Token Supported	Network Scanner	Sep 22, 2026	Medium	N/A	N/A	No
Qdrant - Telemetry Exposure	Network Scanner	Sep 22, 2026	Medium	N/A	N/A	No
Cockpit CMS <= 2.14.0 - Path Traversal / Local File Inclusion CVE-2026-58467	Network Scanner	Sep 22, 2026	High(8.2)	0.02	0.77	No
WordPress Click2Shell Theme Preview Selector Injection	Network Scanner	Sep 22, 2026	High	N/A	N/A	No
Newfold WordPress Plugins - Unauthenticated Admin Bypass via Empty HMAC Secret CVE-2026-80099	Network Scanner	Sep 22, 2026	High(8.8)	0.02	0.76	No
Hippoo Mobile App for WooCommerce - Broken Access Control CVE-2026-49060	Network Scanner	Sep 22, 2026	Critical(9.8)	0.02	0.77	No
WordPress Gravity Forms Plugin <=3.1.0.4 - Unauthenticated Arbitrary File Upload CVE-2026-84434	Network Scanner	Sep 21, 2026	Critical(9.8)	0.03	0.86	No
argocd-mcp 0.8.0 - Unauthenticated MCP Session and Tool Access CVE-2026-82456	Network Scanner	Sep 19, 2026	Critical(10)	0.02	0.72	No
Yamcs <=5.8.6 - Cross-Site Scripting CVE-2026-55549	Network Scanner	Sep 19, 2026	Medium(6.5)	0.01	0.59	No
Langflow OSS - Superuser Token Issuance CVE-2026-9103	Network Scanner	Sep 18, 2026	Critical(9.8)	0.03	0.87	No
Essential Blocks < 6.4.0 - Information Disclosure CVE-2026-13153	Network Scanner	Sep 18, 2026	High(7.5)	0.01	0.59	No
JFrog Artifactory - Anonymous Token Disclosure via Trailing Slash Auth Bypass CVE-2026-42018	Network Scanner	Sep 18, 2026	High(7.5)	0.12	0.96	No
etcd RAFT Unauthenticated API	Network Scanner	Sep 18, 2026	High	N/A	N/A	No
H2 Database Console - JNDI Injection RCE CVE-2021-42392	Network Scanner	Sep 18, 2026	Critical(9.8)	0.84	1	No

Vulnerability & Exploit Database

One of EMEA's fastest-growing tech companies

Independently audited company-wide ISMS

50,000+ security folks are here. Are you?

Security leaders trust what they can prove