Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.146 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 190 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Displaying 1 - 25 results out of 17.146

Pentest-Tools.com Vulnerabilities
Name
Detectable with
Detection added
CVSSv3
EPSS Score
EPSS Percentile
Exploitable
with Sniper
Cybersecurity Infrastructure Security Agency (CISA)Balbooa Forms < 2.4.1 - Unauthenticated Arbitrary File UploadNetwork Scanner

Critical(9.8)

0.010.54No
WordPress Core 6.9-7.0.1 - Pre-Auth Blind SQL Injection (Batch-Route Confusion)Network Scanner

Critical(9.8)

N/A
N/A
No
Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File UploadNetwork Scanner

Critical(9.8)

0.010.54No
9Router - Unauthenticated LLM Provider API ExposureNetwork Scanner

Critical(9.8)

0.020.78No
9Router <= 0.4.36 - Unauthenticated RCENetwork Scanner

Critical(10)

0.050.91No
SeaweedFS Filer - Unauthenticated AccessNetwork Scanner

High

N/A
N/A
No
Apache Tomcat - Cross-Site ScriptingNetwork Scanner

Medium(6.1)

0.030.84No
XStore Theme < 9.7.3 - SQL InjectionNetwork Scanner

High(8.6)

0.010.58No
Trino Cluster Overview - Unauthenticated Dashboard ExposureNetwork Scanner

Medium

N/A
N/A
No
NVIDIA Triton Inference Server <= 26.02 - Authentication BypassNetwork Scanner

Critical(9.8)

0.030.81No
ZoneMinder System LogNetwork Scanner

Low

N/A
N/A
No
YesWiki Bazar Widget - Reflected XSS via 'id' ParameterNetwork Scanner

Medium(6.1)

0.010.13No
XOOPS Installation Page - ExposureNetwork Scanner

High

N/A
N/A
No
ColdFusion - Path TraversalNetwork Scanner

High

0.020.73No
Cybersecurity Infrastructure Security Agency (CISA)Adobe ColdFusion - RDS Arbitrary File WriteNetwork Scanner

Critical(10)

0.290.98No
phpBB < 3.3.17 - Authentication BypassNetwork Scanner

Critical(9.8)

0.030.86No
DzzOffice - Installer Page ExposureNetwork Scanner

High

N/A
N/A
No
MyBB Installation PanelNetwork Scanner

High

N/A
N/A
No
osTicket Installer PanelNetwork Scanner

Critical

N/A
N/A
No
Opcache control Panel - Unauthenticated AccessNetwork Scanner

Medium

N/A
N/A
No
Gorse < 0.5.10 - Unauthenticated Database DumpNetwork Scanner

Critical(9.8)

0.040.86No
Progress ADC LoadMaster - Command InjectionNetwork Scanner

Critical(9.6)

0.440.99No
Concrete5 - Installer Page ExposureNetwork Scanner

High

N/A
N/A
No
GoDaddy Parked Domain - Subdomain TakeoverNetwork Scanner

Medium

N/A
N/A
No
CtrlPanel Installer ExposureNetwork Scanner

High

N/A
N/A
No