Skip to main content
HomePentest-Tools.com Logo
Start free trial

Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.334 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 195 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Search results for: injection

Displaying 1 - 25 results out of 1929

Pentest-Tools.com Vulnerabilities
Name
Detectable with
Detection added
CVSSv3
EPSS Score
EPSS Percentile
Exploitable
with Sniper
Cybersecurity Infrastructure Security Agency (CISA)Zimbra Collaboration Suite < 10.1.20 - OS Command Injection
CVE-2026-73570
Network Scanner

High(8.9)

0.020.73No
Cybersecurity Infrastructure Security Agency (CISA)rConfig <= 3.9.4 - Authenticated OS Command Injection
CVE-2020-10221
Network Scanner

High(8.8)

0.370.99No
OpenTSDB <= 2.4.1 - Unauthenticated RCE via Gnuplot Injection
CVE-2023-25826
Network Scanner

Critical(9.8)

0.360.99No
vBulletin 6.x - Remote Code Execution
CVE-2026-61511
Network Scanner

Critical(9.8)

0.340.99No
Photo Gallery WordPress v1.6.3 - SQL Injection
CVE-2022-1281
Network Scanner

Critical(9.8)

0.440.99No
Sonatype Nexus Repository Manager 3 - Remote Code Execution
CVE-2020-10204
Network Scanner

High(7.2)

0.390.99No
LB-LINK Routers - Unauthenticated Command Injection
CVE-2026-19900
Network Scanner

Critical(9.8)

0.030.82No
Gogs <= 0.14.2 - Authenticated RCE via git rebase Argument Injection
CVE-2026-52806
Network Scanner

Critical(9.9)

0.080.95No
SiYuan - SQL Execution
CVE-2026-69084
Network Scanner

Critical(10)

0.020.64No
Geo Mashup <= 1.13.18 - SQL Injection
CVE-2026-4060
Network Scanner

High(7.5)

0.020.71No
UNA CMS <= 14.0.0-RC4 - PHP Object InjectionNetwork Scanner

Critical

N/A
N/A
No
LG NAS Devices - Remote Code ExecutionNetwork Scanner

Critical

N/A
N/A
No
Nuxeo <10.3 - Remote Code ExecutionNetwork Scanner

High

N/A
N/A
No
My Calendar < 3.7.9 - Unauthenticated SQL Injection
CVE-2026-6854
Network Scanner

High(7.5)

0.020.74No
Dahua EIMS - Unauthenticated Remote Code Execution via capture_handle
CVE-2024-13985
Network Scanner

Critical(9.8)

0.150.97No
WGDashboard <= 4.3.2 - Authenticated OS Command Injection /etc/passwd Read
CVE-2026-15733
Network Scanner

Critical(9.8)

0.140.97No
MediaWiki EasyTimeline - Code Injection RCE
CVE-2026-8857
Network Scanner

High(8.8)

0.030.81No
GLPI - Blind SQL Injection in History Log Filter (LogBleed)
CVE-2026-53629
Network Scanner

High(8.8)

N/A
N/A
No
Cybersecurity Infrastructure Security Agency (CISA)Metabase - Unauthenticated SQL Injection
CVE-2026-72898
Network Scanner

Critical(10)

0.81No
LiteLLM 1.18.10 - Command Injection
CVE-2026-30623
Network Scanner

High(9.8)

0.050.92No
Cybersecurity Infrastructure Security Agency (CISA)React Native Community CLI - Unauthenticated OS Command Injection
CVE-2025-11953
Network Scanner

Critical(9.8)

0.941No
Pheditor 2.0.1-2.0.3 - OS Command Injection
CVE-2026-48030
Network Scanner

Critical(9.9)

0.060.93No
D-Tale <= 3.16.0 - Pre-Auth RCE via Pandas Query Injection
CVE-2024-55890
Network Scanner

Critical(9.8)

0.030.83No
Apache Struts XWork - XML External Entity Injection
CVE-2025-68493
Network Scanner

High(8.1)

0.40.99No
Apache Tika - XXE Injection
CVE-2025-54988
Network Scanner

Critical(9.8)

0.160.97No