Resources

Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.192 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 195 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Displaying 1 - 25 results out of 948

Pentest-Tools.com Vulnerabilities
Name
Detectable with
Detection added
Severity
Exploitable
with Sniper
Cybersecurity Infrastructure Security Agency (CISA)ForgeRock AM/OpenAM - Remote Code ExecutionNetwork Scanner

Critical(9.8)

Yes
Cybersecurity Infrastructure Security Agency (CISA)Check Point Security Management Server - SmartConsole Authentication BypassNetwork Scanner

Critical(9.8)

No
Cybersecurity Infrastructure Security Agency (CISA)IBM Langflow - Remote Code ExecutionNetwork Scanner

Critical(9.8)

No
Cybersecurity Infrastructure Security Agency (CISA)Joomla SP Page Builder <= 6.6.1 - Unauthenticated Arbitrary File Upload RCENetwork Scanner

Critical(9.8)

No
Cybersecurity Infrastructure Security Agency (CISA)Page Builder CK <= 3.5.10 - Unauthenticated Arbitrary File UploadNetwork Scanner

Critical(9.8)

No
Cybersecurity Infrastructure Security Agency (CISA)SonicWall SMA1000 - Server-Side Request ForgeryNetwork Scanner

Critical(10)

No
Cybersecurity Infrastructure Security Agency (CISA)Adobe ColdFusion - RDS Arbitrary File WriteNetwork Scanner

Critical(10)

Yes
Cybersecurity Infrastructure Security Agency (CISA)Joomla JCE - Remote Code ExecutionNetwork Scanner

Critical(10)

Yes
Cybersecurity Infrastructure Security Agency (CISA)Apache ActiveMQ - Remote Code ExecutionNetwork Scanner

High(8.8)

Yes
Cybersecurity Infrastructure Security Agency (CISA)wp2shell - WordPress Core 6.9-7.0.1 - Pre-Auth Batch-Route Confusion leading to SQL InjectionNetwork Scanner

Critical(9.8)

No
Cybersecurity Infrastructure Security Agency (CISA)wp2shell - WordPress Core 6.9.0-6.9.4 and 7.0.0-7.0.1 - Pre-Auth Batch-Route Confusion leading to SQL InjectionNetwork Scanner

Critical(9.8)

Yes
Cybersecurity Infrastructure Security Agency (CISA)Balbooa Forms < 2.4.1 - Unauthenticated Arbitrary File UploadNetwork Scanner

Critical(9.8)

No
Cybersecurity Infrastructure Security Agency (CISA)Adobe ColdFusion - RDS Arbitrary File WriteNetwork Scanner

Critical(10)

No
Cybersecurity Infrastructure Security Agency (CISA)D-Link DIR-823X set_prohibiting - Command InjectionNetwork Scanner

High(7.2)

No
Cybersecurity Infrastructure Security Agency (CISA)Oracle PeopleSoft PeopleTools PSEMHUB - Pre-Auth Java Deserialization RCENetwork Scanner

Critical(9.8)

No
Cybersecurity Infrastructure Security Agency (CISA)Check Point IKEv1 Remote-Access VPN - Certificate Authentication BypassNetwork Scanner

Critical(10)

No
Cybersecurity Infrastructure Security Agency (CISA)Splunk Enterprise & Cloud Platform - Unrestricted File UploadNetwork Scanner

Critical(9.8)

No
Cybersecurity Infrastructure Security Agency (CISA)Joomla! JCE extension < 2.9.99.5 unauthenticated RCENetwork Scanner

Critical(10)

No
Cybersecurity Infrastructure Security Agency (CISA)Ivanti Sentry - OS Command InjectionNetwork Scanner

Critical(10)

No
Cybersecurity Infrastructure Security Agency (CISA)UniFi OS Server - Command InjectionNetwork Scanner

Critical(10)

No
Cybersecurity Infrastructure Security Agency (CISA)LiteLLM - Command InjectionNetwork Scanner

Critical(9.8)

No
Cybersecurity Infrastructure Security Agency (CISA)Palo Alto Networks PAN-OS - Authentication BypassNetwork Scanner

Critical(9.1)

No
Cybersecurity Infrastructure Security Agency (CISA)LiteLLM - SQL InjectionNetwork Scanner

Critical(9.8)

No
Cybersecurity Infrastructure Security Agency (CISA)Drupal Core - Anonymous SQL Injection via PostgreSQL Entity QueryNetwork Scanner

Critical(9.8)

No
Cybersecurity Infrastructure Security Agency (CISA)Cisco Catalyst SD-WAN Controller - vHub Authentication BypassNetwork Scanner

Critical(10)

No