Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.143 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 190 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Displaying 1 - 25 results out of 17.143

Pentest-Tools.com Vulnerabilities
Name
Detectable with
Detection added
CVSSv3
EPSS Score
EPSS Percentile
Exploitable
with Sniper
9Router - Unauthenticated LLM Provider API ExposureNetwork Scanner

Critical(9.8)

0.010.41No
9Router <= 0.4.36 - Unauthenticated RCENetwork Scanner

Critical(10)

0.010.36No
Trino Cluster Overview - Unauthenticated Dashboard ExposureNetwork Scanner

Medium

N/A
N/A
No
XStore Theme < 9.7.3 - SQL InjectionNetwork Scanner

High(8.6)

0.010.58No
SeaweedFS Filer - Unauthenticated AccessNetwork Scanner

High

N/A
N/A
No
Apache Tomcat - Cross-Site ScriptingNetwork Scanner

Medium(6.1)

0.030.84No
NVIDIA Triton Inference Server <= 26.02 - Authentication BypassNetwork Scanner

Critical(9.8)

0.030.81No
ZoneMinder System LogNetwork Scanner

Low

N/A
N/A
No
YesWiki Bazar Widget - Reflected XSS via 'id' ParameterNetwork Scanner

Medium(6.1)

0.010.13No
XOOPS Installation Page - ExposureNetwork Scanner

High

N/A
N/A
No
ColdFusion - Path TraversalNetwork Scanner

High

0.020.73No
Cybersecurity Infrastructure Security Agency (CISA)Adobe ColdFusion - RDS Arbitrary File WriteNetwork Scanner

Critical(10)

0.290.98No
phpBB < 3.3.17 - Authentication BypassNetwork Scanner

Critical(9.8)

0.030.86No
MyBB Installation PanelNetwork Scanner

High

N/A
N/A
No
DzzOffice - Installer Page ExposureNetwork Scanner

High

N/A
N/A
No
osTicket Installer PanelNetwork Scanner

Critical

N/A
N/A
No
Gorse < 0.5.10 - Unauthenticated Database DumpNetwork Scanner

Critical(9.8)

0.040.86No
Concrete5 - Installer Page ExposureNetwork Scanner

High

N/A
N/A
No
Opcache control Panel - Unauthenticated AccessNetwork Scanner

Medium

N/A
N/A
No
Progress ADC LoadMaster - Command InjectionNetwork Scanner

Critical(9.6)

0.440.99No
GoDaddy Parked Domain - Subdomain TakeoverNetwork Scanner

Medium

N/A
N/A
No
CtrlPanel Installer ExposureNetwork Scanner

High

N/A
N/A
No
OneUptime < 10.0.21 - Path TraversalNetwork Scanner

High(7.2)

0.020.62No
YMC Filter WordPress - Unauthenticated Post DisclosureNetwork Scanner

High(7.5)

0.010.57No
MISP < 2.5.37 - SQL InjectionNetwork Scanner

Medium(5.3)

0.010.42No