Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 16.735 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 182 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Displaying 1 - 25 results out of 182

Pentest-Tools.com Vulnerabilities
Name
Detectable with
Detection added
CVSSv3
EPSS Score
EPSS Percentile
Exploitable
with Sniper
Cybersecurity Infrastructure Security Agency (CISA)HPE OneView - Remote Code ExecutionNetwork Scanner

Critical(10)

0.871Yes
Cybersecurity Infrastructure Security Agency (CISA)MeteoBridge <= 6.1 - Remote Code ExecutionNetwork Scanner

High(7.5)

0.40.98Yes
Cybersecurity Infrastructure Security Agency (CISA)Ivanti Endpoint Manager Mobile - Remote Code ExecutionNetwork Scanner

Critical(9.8)

0.650.99Yes
Cybersecurity Infrastructure Security Agency (CISA)Telnet inetutils - Authentication BypassNetwork Scanner

Critical(9.8)

0.821Yes
WordPress Post SMTP - Account TakeoverNetwork Scanner

Critical(9.8)

0.130.94Yes
Cybersecurity Infrastructure Security Agency (CISA)React Server Components - Remote Code Execution (React2Shell)Network Scanner

Critical(10)

0.650.99Yes
Cybersecurity Infrastructure Security Agency (CISA)Fortinet FortiWeb - Authentication Bypass & Remote Code ExecutionNetwork Scanner

Critical(9.8)

0.91Yes
WordPress Simple File List - Unauthenticated RCENetwork Scanner

Critical(9.8)

0.871Yes
Cybersecurity Infrastructure Security Agency (CISA)React Native Community CLI development server - Remote Code ExecutionNetwork Scanner

Critical(9.8)

0.040.88Yes
ASP.NET Core - Request SmugglingNetwork Scanner

Critical(9.9)

0.010.59Yes
Cybersecurity Infrastructure Security Agency (CISA)Oracle E-Business Suite - Remote Code ExecutionNetwork Scanner

Critical(9.8)

0.871Yes
Cybersecurity Infrastructure Security Agency (CISA)Magento & Adobe Commerce - Account TakeoverNetwork Scanner

Critical(9.1)

0.740.99Yes
Cybersecurity Infrastructure Security Agency (CISA)FreePBX - Authentication Bypass leading to SQL Injection & Remote Code ExecutionNetwork Scanner

Critical(9.8)

0.660.99Yes
Fortinet FortiSIEM - Remote Code ExecutionNetwork Scanner

Critical(9.8)

0.490.98Yes
Cybersecurity Infrastructure Security Agency (CISA)Microsoft Sharepoint - Authentication Bypass & Remote Code ExecutionNetwork Scanner

High(8.8)

0.670.99Yes
SSH user enumerationNetwork Scanner

Medium(5.3)

0.911Yes
Cybersecurity Infrastructure Security Agency (CISA)Ivanti Endpoint Manager Mobile - Remote Code ExecutionNetwork Scanner

High(7.5)

0.921Yes
Wordpress TemplateInvaders - Arbitrary File UploadNetwork Scanner

Critical(10)

0.010.41Yes
Cybersecurity Infrastructure Security Agency (CISA)Craft CMS - Remote Code ExecutionNetwork Scanner

Critical(9.8)

0.951Yes
SMB - Anonymous Write AccessNetwork Scanner

Critical(9.8)

N/A
N/A
Yes
SMB - Anonymous AccessNetwork Scanner

High(8.2)

N/A
N/A
Yes
Zyxel - Default credentialsNetwork Scanner

Critical(9.8)

0.020.79Yes
WordPress WP File Upload Plugin - Remote Code ExecutionNetwork Scanner

Critical(9.8)

0.20.96Yes
Cybersecurity Infrastructure Security Agency (CISA)Zyxel - Telnet Command InjectionNetwork Scanner

High(8.8)

0.470.98Yes
Craft CMS - Remote Code ExecutionNetwork Scanner

Critical(9.8)

0.941Yes