Resources

Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 15.264 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 164 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Is exploitable with Sniper

Is in CISA catalog

Detectable with

Displaying 1 - 25 results out of 701

Pentest-Tools.com Vulnerabilities
Name	Detectable with	Detection added	Severity	Exploitable with Sniper
Dahua IPC/VTH/VTO - Authentication Bypass CVE-2021-33045	Network Scanner	Jun 25, 2025	Critical(9.8)	No
D-Link Network Attached Storage - Backdoor Account CVE-2024-3272	Network Scanner	Jun 21, 2025	Critical(9.8)	No
NUUO NVRmini - Remote Command Execution CVE-2018-14933	Network Scanner	Jun 17, 2025	Critical(9.8)	No
Tenda AC15 AC1900 version 15.03.05.19 - Command Injection CVE-2020-10987	Network Scanner	Jun 15, 2025	Critical(9.8)	No
D-Link DIR820LA1_FW105B03 'ping_addr' - OS Command Injection CVE-2023-25280	Network Scanner	Jun 15, 2025	Critical(9.8)	No
Roundcube Webmail - Command Injection CVE-2020-12641	Network Scanner	Jun 14, 2025	Critical(9.8)	No
Nazgul Nostromo nhttpd < 1.9.7 Multiple Directory Traversal Vulnerabilities CVE-2019-16278 CVE-2019-16279	Network Scanner	Jun 13, 2025	High(7.5)	No
D-Link DIR-859 < 1.07b03_beta RCE Vulnerability (SAP10146) CVE-2019-17621	Network Scanner	Jun 13, 2025	Critical(9.8)	No
D-Link DIR-300 Multiple Vulnerabilities (2011 - 2024) CVE-2011-4723 CVE-2013-7471 CVE-2024-0717 CVE-2024-41616	Network Scanner	Jun 13, 2025	N/A	No
D-Link DIR-605 - Information Disclosure CVE-2021-40655	Network Scanner	Jun 8, 2025	High(7.5)	No
ZKTeco BioTime v8.5.5 - Path Traversal CVE-2023-38950	Network Scanner	May 31, 2025	High(7.5)	No
DrayTek Vigor - Command Injection CVE-2024-12987	Network Scanner	May 23, 2025	Critical(9.8)	No
TP-Link Archer AX21 (AX1800) - Unauthenticated Command Injection CVE-2023-1389	Network Scanner	May 23, 2025	Critical(9.8)	No
PRTG Network Monitor - Local File Inclusion CVE-2018-19410	Network Scanner	May 23, 2025	Critical(9.8)	No
ThinkPHP 5.0.23 - Remote Code Execution CVE-2018-20062	Network Scanner	May 20, 2025	Critical(9.8)	No
Wazuh - Unsafe Deserialization Remote Code Execution CVE-2025-24016	Network Scanner	May 20, 2025	Critical(9.9)	No
DrayTek Vigor - Command Injection CVE-2020-15415	Network Scanner	May 20, 2025	Critical(9.8)	No
Ivanti Endpoint Manager Mobile - Unauthenticated Remote Code Execution CVE-2025-4427	Network Scanner	May 16, 2025	Medium(5.3)	No
Sonicwall - Pre-Authentication Arbitrary File Read CVE-2024-38475	Network Scanner	May 3, 2025	Critical(9.1)	No
Commvault - SSRF via /commandcenter/deployWebpackage.do CVE-2025-34028	Network Scanner	Apr 28, 2025	Critical(10)	No
SAP NetWeaver Visual Composer Metadata Uploader - Deserialization CVE-2025-31324	Network Scanner	Apr 27, 2025	Critical(10)	No
TP-Link AX21 Router Devices Multiple Vulnerabilities (Apr 2023) CVE-2023-1389 CVE-2023-27359	Network Scanner	Apr 25, 2025	Critical(9.8)	No
Kentico CMS <= 12.0.14 RCE Vulnerability CVE-2019-10068	Network Scanner	Apr 25, 2025	Critical(9.8)	No
Erlang/OTP SSH - Remote Code Execution CVE-2025-32433	Network Scanner	Apr 22, 2025	Critical(10)	No
CrushFTP - Authentication Bypass CVE-2025-31161	Network Scanner	Apr 22, 2025	Critical(9.8)	No