Skip to main content

Resources

Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 16.421 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 177 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Displaying 1 - 25 results out of 16.279

Pentest-Tools.com Vulnerabilities
Name
Detectable with
Detection added
CVSSv3
EPSS Score
EPSS Percentile
Exploitable
with Sniper
Western Digital My Cloud Multiple Products Man in the middle Vulnerability (WDC-25009)
CVE-2025-26465
Network Scanner

Medium(6.8)

0.650.99No
CMP WordPress < 4.0.19 - Broken Access Control
CVE-2022-0188
Network Scanner

Medium(5.3)

0.180.95No
Flask Debug Toolbar - ExposureNetwork Scanner

Medium

N/A
N/A
No
Ocean Extra <= 2.4.6 - Unauthenticated Shortcode Execution
CVE-2025-3472
Network Scanner

Medium(6.5)

0.180.95No
Jakefile Build Configuration - DisclosureNetwork Scanner

Medium

N/A
N/A
No
Ektron CMS Blogs xmlrpc.aspx - XML External Entity InjectionNetwork Scanner

High

N/A
N/A
No
Kanboard - SQLite Database ExposureNetwork Scanner

High

N/A
N/A
No
Dot Credentials - ExposureNetwork Scanner

High

N/A
N/A
No
PEAR Registry Files ExposedNetwork Scanner

Low

N/A
N/A
No
Drupal - Source Code DisclosureNetwork Scanner

Medium

N/A
N/A
No
Modular DS - Broken Access Control
CVE-2026-23550
Network Scanner

High(10)

0.070.91No
Administrate Dashboard ExposureNetwork Scanner

High

N/A
N/A
No
Zipkin Configuration - ExposureNetwork Scanner

Low

N/A
N/A
No
JHipster Platform - Default LoginNetwork Scanner

High

N/A
N/A
No
WordPress Data Source for Contact Form 7 - Full Path DisclosureNetwork Scanner

Low

N/A
N/A
No
XWiki DeleteApplication - Cross-Site Scripting
CVE-2025-66472
Network Scanner

Medium(6.1)

0.020.81No
Firebase Cloud Messaging - Server Key DisclosureNetwork Scanner

Medium

N/A
N/A
No
Eveo URVE Web Manager - Server-Side Request Forgery
CVE-2025-36845
Network Scanner

High(8.6)

0.050.9No
eXist-DB Dashboard AccessNetwork Scanner

High

N/A
N/A
No
WordPress a3 Lazy Load - Full Path DisclosureNetwork Scanner

Low

N/A
N/A
No
ASP.NET Launch Settings - ExposureNetwork Scanner

Medium

N/A
N/A
No
AWS CodeBuild Build Spec - ExposureNetwork Scanner

Low

N/A
N/A
No
Shopware < 5.5.8 - Cross-Site Scripting
CVE-2019-12935
Network Scanner

High(7.4)

0.040.88No
CakePHP - Debug Kit Toolbar ExposureNetwork Scanner

Medium

N/A
N/A
No
WordPress Gravity Forms - Log File DisclosureNetwork Scanner

Low

N/A
N/A
No