Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.552 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 210 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Search results for: OAuth

Displaying 1 - 25 results out of 31

Pentest-Tools.com Vulnerabilities
Name	Detectable with	Detection added	CVSSv3	EPSS Score	EPSS Percentile	Exploitable with Sniper
MountDev AI MCP Connector <= 1.6.1 - Unauthenticated Admin OAuth Token Exposure CVE-2026-15015	Network Scanner	Oct 21, 2026	Critical(9.8)	0.03	0.86	No
RabbitMQ Management - OAuth 2 Client Secret Disclosure CVE-2026-57219	Network Scanner	Aug 20, 2026	High(7.5)	0.03	0.87	No
Flowise <= 3.0.13 - Unauthenticated OAuth Configuration Disclosure CVE-2026-56270	Network Scanner	Aug 19, 2026	High(7.5)	0.03	0.82	No
DataEase < 2.10.4 - Authentication Bypass via Whitelist Path Traversal CVE-2024-56511	Network Scanner	Jul 23, 2026	Critical(9.8)	0.51	0.99	No
9Router - Default Login	Network Scanner	Jul 22, 2026	High	N/A	N/A	No
Laravel Passport - OAuth2 Keys Exposed	Network Scanner	May 27, 2026	High	N/A	N/A	No
IBM MobileFirst Foundation - Default Credentials	Network Scanner	May 9, 2026	Critical	N/A	N/A	No
Casdoor - Default Admin Credentials	Network Scanner	Mar 27, 2026	High	N/A	N/A	No
Apache Kafka Client - Arbitrary File Read CVE-2025-27817	Network Scanner	Jan 23, 2026	High(7.5)	0.69	1	No
Integrate Google Drive <= 1.5.3 - Information Disclosure CVE-2025-12139	Network Scanner	Dec 24, 2025	High(7.5)	0.03	0.85	No
Hongjing e-HR 2020 - SQL Injection CVE-2023-6655	Network Scanner	Oct 19, 2025	High(7.3)	0.04	0.9	No
VMware Workspace ONE Access - Authentication Bypass CVE-2022-22956	Network Scanner	Oct 15, 2025	Critical(9.8)	0.5	0.99	No
Bitbucket OAuth Credentials Exposure	Network Scanner	Sep 19, 2025	High	N/A	N/A	No
Discourse OAuth Social Login - Cross-site Scripting CVE-2025-48954	Network Scanner	Aug 12, 2025	High(8.1)	0.01	0.55	No
Citrix NetScaler - Memory Leak CVE-2025-5777	Network Scanner	Jul 22, 2025	High(7.5)	1	1	No
Oauth Credentials Json	Network Scanner	Dec 2, 2024	Low	N/A	N/A	No
Dahua Intelligent IoT - Information Disclosure	Network Scanner	Dec 2, 2024	High	N/A	N/A	No
SSRF due to misconfiguration in OAuth	Network Scanner	Dec 2, 2024	Medium	N/A	N/A	No
pgAdmin 4 - Authentication Bypass CVE-2024-9014	Network Scanner	Sep 30, 2024	Critical(9.9)	0.1	0.96	No
OpenAM<=15.0.3 FreeMarker - Template Injection CVE-2024-41667	Network Scanner	Sep 11, 2024	High(8.8)	0.04	0.9	No
Strapi Versions <=4.5.6 - Authentication Bypass CVE-2023-22893	Network Scanner	Sep 6, 2024	High(7.5)	0.05	0.91	No
Analytics Insights for Google Analytics 4 < 6.3 - Open Redirect CVE-2024-0250	Network Scanner	Jun 11, 2024	Medium(5.8)	0.02	0.7	No
Citrix NetScaler - Memory Leak CVE-2023-4966	Network Scanner	Nov 7, 2023	Critical(9.4)	1	1	Yes
Atlassian Jira IconURIServlet - Cross-Site Scripting/Server-Side Request Forgery CVE-2017-9506	Network Scanner	Jul 4, 2023	Medium(6.1)	0.72	1	No
Spring Security OAuth2 Remote Command Execution CVE-2016-4977	Network Scanner	Jul 4, 2023	High(8.8)	0.8	1	No

Vulnerability & Exploit Database

One of EMEA's fastest-growing tech companies

Independently audited company-wide ISMS

50,000+ security folks are here. Are you?

Security leaders trust what they can prove