Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.657 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 223 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Displaying 1 - 25 results out of 17.657

Pentest-Tools.com Vulnerabilities
Name	Detectable with	Detection added	CVSSv3	EPSS Score	EPSS Percentile	Exploitable with Sniper
NotificationX < 3.3.7 - Unauthenticated Notification Preview CVE-2026-119302	Network Scanner	Nov 13, 2026	High(6.5)	0.01	0.26	No
Apache bRPC Heap Profiler - Remote Command Injection CVE-2025-60021	Network Scanner	Nov 13, 2026	Critical(9.8)	0.26	0.98	No
Tinyproxy < 1.11.2 - Use After Free in HTTP Connection Header CVE-2023-49606	Network Scanner	Nov 13, 2026	Critical(9.8)	0.64	1	No
FUXA <= 1.2.8 - Authentication Bypass to Remote Code Execution CVE-2025-69985	Network Scanner	Nov 13, 2026	Critical(9.8)	0.07	0.94	No
MajorDoMo - OS Command Injection via Race Condition CVE-2026-27175	Network Scanner	Nov 13, 2026	Critical(9.8)	0.07	0.95	No
Mingsoft MCMS 5.1 - SQL Injection CVE-2021-44868	Network Scanner	Nov 13, 2026	Critical(9.8)	0.02	0.74	No
TYPO3 Caddy Extension < 7.2.10 - Cross-Site Scripting CVE-2017-5963	Network Scanner	Nov 13, 2026	Medium(6.1)	0.02	0.65	No
SolarWinds Serv-U - Denial of Service CVE-2026-28318	Network Scanner	Nov 13, 2026	High(7.5)	0.49	0.99	No
openDCIM - Unauthenticated SQL Injection to OS Command Injection CVE-2026-28517	Network Scanner	Nov 13, 2026	Critical(9.8)	0.07	0.94	No
SourceCodester Stock Management System 1.0 - SQL Injection Authentication Bypass CVE-2025-4283	Network Scanner	Nov 13, 2026	Critical(9.8)	0.01	0.52	No
vulnerability-operator < 0.28.16 - Unauthenticated Report Directory Listing CVE-2026-64858	Network Scanner	Nov 13, 2026	Medium(5.3)	N/A	N/A	No
Fortinet FortiSandbox - Path Traversal Authentication Bypass CVE-2026-39813	Network Scanner	Nov 13, 2026	Critical(9.8)	0.23	0.98	No
Mingsoft MCMS 5.2.7 - SQL Injection CVE-2022-30047	Network Scanner	Nov 13, 2026	Critical(9.8)	0.02	0.75	No
Apache HTTP Server - Race Condition CVE-2026-119618	Network Scanner	Nov 12, 2026	Critical(9.8)	N/A	N/A	No
MLflow Tracking Server - Unauthenticated Model Source Path Traversal RCE CVE-2025-11201	Network Scanner	Nov 12, 2026	Critical(9.8)	0.29	0.99	No
Munin munin-httpd 2.99.1-2.999.18 - Unauthenticated Path Traversal CVE-2026-125357	Network Scanner	Nov 12, 2026	Medium(5.3)	0.01	0.29	No
WordPress Simple File List < 4.2.3 - Unauthenticated Remote Code Execution CVE-2020-36847	Network Scanner	Nov 12, 2026	Critical(9.8)	0.44	0.99	No
Ollama < 0.17.1 - Information Disclosure CVE-2026-7482	Network Scanner	Nov 12, 2026	Critical(9.1)	0.03	0.84	No
Stop User Enumeration <= 1.3.8 - REST API User Enumeration Bypass CVE-2017-1000226	Network Scanner	Nov 12, 2026	Medium(5.3)	0.02	0.73	No
JFrog Artifactory - Unauthenticated Admin Token Minting via Token Scope Bypass CVE-2026-42016	Network Scanner	Nov 12, 2026	High(8.8)	0.09	0.96	No
FUXA - Authorization Bypass CVE-2026-25939	Network Scanner	Nov 12, 2026	Critical(9.1)	0.13	0.97	No
Simple 301 Redirects by BetterLinks <= 2.0.3 - Unauthenticated Arbitrary Redirect Import CVE-2021-24353	Network Scanner	Nov 12, 2026	High(8.8)	0.02	0.67	No
WP e-Commerce Shop Styling <= 2.5 - Authenticated Directory Traversal / Arbitrary File Read CVE-2015-5468	Network Scanner	Nov 11, 2026	Medium(6.5)	0.25	0.98	No
Profile Builder <= 3.11.8 - Unauthenticated Privilege Escalation CVE-2024-6695	Network Scanner	Nov 11, 2026	Critical(9.8)	0.01	0.57	No
EduSoho < 22.4.7 - Unauthenticated Arbitrary File Read CVE-2023-7335	Network Scanner	Nov 11, 2026	High(8.7)	0.01	0.56	No

Vulnerability & Exploit Database

One of EMEA's fastest-growing tech companies

Independently audited company-wide ISMS

50,000+ security folks are here. Are you?

Security leaders trust what they can prove