Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.485 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 210 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Search results for: injection

Displaying 1 - 25 results out of 1956

Pentest-Tools.com Vulnerabilities
Name	Detectable with	Detection added	CVSSv3	EPSS Score	EPSS Percentile	Exploitable with Sniper
Selenium Grid < 4.0.0-alpha-7 - Remote Code Execution CVE-2022-28108	Network Scanner	Oct 13, 2026	Critical(9.8)	0.12	0.96	No
WWBN AVideo Encoder < 7.0 - Unauthenticated OS Command Injection CVE-2026-29058	Network Scanner	Oct 5, 2026	Critical(9.8)	0.07	0.94	No
Citrix NetScaler - Remote Code Execution CVE-2026-88771	Network Scanner	Sep 30, 2026	Critical(9.5)	0.02	0.65	Yes
Magento - Remote Code Execution CVE-2026-75650	Network Scanner	Sep 29, 2026	Critical(10)	0.04	0.91	Yes
Asgaros Forum < 3.2.0 - SQL Injection CVE-2025-11452	Network Scanner	Sep 24, 2026	High(7.5)	0.02	0.7	No
Blue Angel Software Suite (5V Technologies) - OS Command Injection CVE-2025-34033	Network Scanner	Sep 24, 2026	High(8.8)	0.12	0.96	No
WordPress Click2Shell Theme Preview Selector Injection	Network Scanner	Sep 22, 2026	High	N/A	N/A	No
Laravel Livewire - Remote Code Execution CVE-2025-54068	Network Scanner	Sep 22, 2026	Critical(9.8)	0.98	1	Yes
N-able N-central <2026.3.1.14 - Pre-Authentication Remote Code Execution CVE-2026-86218	Network Scanner	Sep 18, 2026	Critical(10)	0.15	0.97	No
Ivanti EPMM < 12.8.0.0 - Remote Code Execution CVE-2026-1340	Network Scanner	Sep 18, 2026	Critical(9.8)	0.99	1	No
H2 Database Console - JNDI Injection RCE CVE-2021-42392	Network Scanner	Sep 18, 2026	Critical(9.8)	0.84	1	No
SiYuan <=3.7.2 - SQL Injection CVE-2026-69085	Network Scanner	Sep 18, 2026	Critical(10)	0.02	0.74	No
SonicWall GMS - Remote Code Execution CVE-2026-66147	Network Scanner	Sep 16, 2026	Critical(9.8)	0.02	0.78	Yes
CtrlPanel <= 1.1.1 - Remote Code Execution CVE-2026-34234	Network Scanner	Sep 15, 2026	Critical(10)	0.05	0.92	No
Ivanti EPMM <=12.7.0.0 - Unauthenticated Code Injection CVE-2026-1281	Network Scanner	Sep 15, 2026	Critical(9.8)	0.99	1	No
cve-search 4.0-6.0.0 - Unauthenticated NoSQL Injection CVE-2026-59509	Network Scanner	Sep 15, 2026	Critical(9.2)	0.02	0.73	No
Provectus kafka-ui <=0.7.2 - Remote Code Execution CVE-2026-5562	Network Scanner	Sep 14, 2026	Critical(9.8)	0.04	0.89	No
Phoenix Storybook - Remote Code Execution CVE-2026-8467	Network Scanner	Sep 11, 2026	Critical(9.8)	0.03	0.81	No
GiveWP <= 4.16.7.1 - Remote Code Execution CVE-2026-82222	Network Scanner	Sep 11, 2026	Critical(9.8)	0.03	0.83	No
VidShop for WooCommerce <= 1.1.4 - SQL Injection CVE-2026-0702	Network Scanner	Sep 10, 2026	High(7.5)	0.02	0.75	No
AcyMailing < 10.11.1 - Unauthenticated SQL Injection CVE-2026-56292	Network Scanner	Sep 8, 2026	High(7.5)	0.02	0.72	No
ClipBucket v5 <= 5.5.2 - Unauthenticated Blind SQL Injection CVE-2026-21875	Network Scanner	Sep 7, 2026	Critical(9.8)	0.02	0.78	No
Tutor LMS < 4.0.6 - Unauthenticated Arbitrary PHP Function Invocation CVE-2026-19092	Network Scanner	Sep 2, 2026	Critical(9.8)	0.03	0.81	No
mJobTime <= 15.7.2 - Unauthenticated Blind SQL Injection to RCE CVE-2025-51683	Network Scanner	Sep 2, 2026	Critical(9.8)	0.02	0.81	No
Sangoma Switchvox < 8.4.0.2 - Unauthenticated SQL Injection CVE-2026-9586	Network Scanner	Sep 2, 2026	Critical(9.8)	0.19	0.98	No

Vulnerability & Exploit Database

One of EMEA's fastest-growing tech companies

Independently audited company-wide ISMS

50,000+ security folks are here. Are you?

Security leaders trust what they can prove