Resources

Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 15.299 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 166 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Is exploitable with Sniper

Is in CISA catalog

Detectable with

Displaying 1 - 25 results out of 742

Pentest-Tools.com Vulnerabilities
Name	Detectable with	Detection added	Severity	Exploitable with Sniper
D-Link DIR-859 Multiple Vulnerabilities (2019 - 2024) CVE-2019-17508 CVE-2020-25506 CVE-2022-25106 CVE-2022-46476 CVE-2024-48630 CVE-2023-36092 CVE-2024-0769 CVE-2024-57045	Network Scanner	Jul 2, 2025	N/A	No
Ivanti Endpoint Manager Mobile - Remote Code Execution CVE-2025-4427	Network Scanner	Jul 1, 2025	High(7.5)	Yes
QNAP Photo Station < 6.0.3 - Remote Code Execution CVE-2019-7194	Network Scanner	Jun 28, 2025	Critical(9.8)	No
Microsoft SMBv3 - Remote Code Execution CVE-2020-0796	Network Scanner	Jun 28, 2025	Critical(10)	No
Microsoft .NET Framework - Remote Code Execution CVE-2020-0646	Network Scanner	Jun 27, 2025	Critical(9.8)	No
Microsoft SharePoint - Remote Code Execution CVE-2019-0604	Network Scanner	Jun 27, 2025	Critical(9.8)	No
Dahua IPC/VTH/VTO - Authentication Bypass CVE-2021-33045	Network Scanner	Jun 25, 2025	Critical(9.8)	No
D-Link Network Attached Storage - Backdoor Account CVE-2024-3272	Network Scanner	Jun 21, 2025	Critical(9.8)	No
NUUO NVRmini - Remote Command Execution CVE-2018-14933	Network Scanner	Jun 17, 2025	Critical(9.8)	No
D-Link DIR820LA1_FW105B03 'ping_addr' - OS Command Injection CVE-2023-25280	Network Scanner	Jun 15, 2025	Critical(9.8)	No
Tenda AC15 AC1900 version 15.03.05.19 - Command Injection CVE-2020-10987	Network Scanner	Jun 15, 2025	Critical(9.8)	No
Roundcube Webmail - Command Injection CVE-2020-12641	Network Scanner	Jun 14, 2025	Critical(9.8)	No
D-Link DIR-300 Multiple Vulnerabilities (2011 - 2024) CVE-2011-4723 CVE-2013-7471 CVE-2024-0717 CVE-2024-41616	Network Scanner	Jun 13, 2025	N/A	No
D-Link DIR-859 < 1.07b03_beta RCE Vulnerability (SAP10146) CVE-2019-17621	Network Scanner	Jun 13, 2025	Critical(9.8)	No
Nazgul Nostromo nhttpd < 1.9.7 Multiple Directory Traversal Vulnerabilities CVE-2019-16278 CVE-2019-16279	Network Scanner	Jun 13, 2025	High(7.5)	No
D-Link DIR-605 - Information Disclosure CVE-2021-40655	Network Scanner	Jun 8, 2025	High(7.5)	No
Craft CMS - Remote Code Execution CVE-2024-56145	Network Scanner	Jun 2, 2025	Critical(9.8)	Yes
ZKTeco BioTime v8.5.5 - Path Traversal CVE-2023-38950	Network Scanner	May 31, 2025	High(7.5)	No
TP-Link Archer AX21 (AX1800) - Unauthenticated Command Injection CVE-2023-1389	Network Scanner	May 23, 2025	Critical(9.8)	No
DrayTek Vigor - Command Injection CVE-2024-12987	Network Scanner	May 23, 2025	Critical(9.8)	No
PRTG Network Monitor - Local File Inclusion CVE-2018-19410	Network Scanner	May 23, 2025	Critical(9.8)	No
ThinkPHP 5.0.23 - Remote Code Execution CVE-2018-20062	Network Scanner	May 20, 2025	Critical(9.8)	No
Wazuh - Unsafe Deserialization Remote Code Execution CVE-2025-24016	Network Scanner	May 20, 2025	Critical(9.9)	No
DrayTek Vigor - Command Injection CVE-2020-15415	Network Scanner	May 20, 2025	Critical(9.8)	No
Ivanti Endpoint Manager Mobile - Unauthenticated Remote Code Execution CVE-2025-4427	Network Scanner	May 16, 2025	Medium(5.3)	No