Resources

Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.192 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 195 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Is exploitable with Sniper

Is in CISA catalog

Detectable with

Displaying 1 - 25 results out of 17.050

Pentest-Tools.com Vulnerabilities
Name	Detectable with	Detection added	Severity	Exploitable with Sniper
ForgeRock AM/OpenAM - Remote Code Execution CVE-2021-35464	Network Scanner	Aug 4, 2026	Critical(9.8)	Yes
Claude Code Project Settings Exposure	Network Scanner	Jul 31, 2026	High	No
Flowise - Path Traversal CVE-2025-71334	Network Scanner	Jul 31, 2026	Critical(9.8)	No
Apache Struts XWork - XML External Entity Injection CVE-2025-68493	Network Scanner	Jul 31, 2026	High(8.1)	No
Microweber CMS <= 2.0.20 - Unauthenticated Arbitrary File Read CVE-2026-65694	Network Scanner	Jul 31, 2026	High(7.5)	No
Apache Tika - XXE Injection CVE-2025-54988	Network Scanner	Jul 30, 2026	Critical(9.8)	No
Check Point Security Management Server - SmartConsole Authentication Bypass CVE-2026-16232	Network Scanner	Jul 29, 2026	Critical(9.8)	No
Dolibarr <=22.0.4 - Local File Inclusion CVE-2026-34036	Network Scanner	Jul 29, 2026	Medium(6.5)	No
Discuz! X5.0 - Authentication Bypass CVE-2026-49952	Network Scanner	Jul 29, 2026	Critical(9.1)	No
Apache Solr 9.4.0-9.10.1 / 10.0.0 - Hardcoded Default Credentials CVE-2026-44825	Network Scanner	Jul 29, 2026	High(8.1)	No
SureForms <= 2.5.2 - Unauthenticated Payment Amount Validation Bypass via form_id CVE-2026-4987	Network Scanner	Jul 29, 2026	High(7.5)	No
Avada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion CVE-2026-8713	Network Scanner	Jul 28, 2026	Critical(9.1)	No
User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Attachment Deletion CVE-2025-14047	Network Scanner	Jul 28, 2026	Medium(5.3)	No
IBM Langflow - Remote Code Execution CVE-2026-9198	Network Scanner	Jul 28, 2026	Critical(9.8)	No
Canto <= 3.1.1 - Missing Authorization to Unauthenticated File Upload CVE-2026-3335	Network Scanner	Jul 28, 2026	Medium(5.3)	No
Quick Playground <= 1.3.1 - Missing Authorization to Unauthenticated Arbitrary File Upload CVE-2026-1830	Network Scanner	Jul 28, 2026	Critical(9.8)	No
Arelle < 2.39.10 - Remote Code Execution CVE-2026-42796	Network Scanner	Jul 24, 2026	Critical(9.8)	No
Perforce Server - Unauthenticated Remote Depot Access CVE-2026-6043	Network Scanner	Jul 23, 2026	High(7.5)	No
WordPress WP Go Maps < 10.0.10 - Unauthenticated Marker Data Disclosure CVE-2026-8385	Network Scanner	Jul 23, 2026	Medium(5.3)	No
Alibaba Sentinel - Default Login	Network Scanner	Jul 23, 2026	High	No
Prodigy Annotation Tool - Unauthenticated Exposure	Network Scanner	Jul 23, 2026	Medium	No
Dockwatch <= 0.6.567 - OS Command Injection CVE-2026-58455	Network Scanner	Jul 23, 2026	Critical(9.8)	No
Perforce Server - Information Disclosure CVE-2026-6043	Network Scanner	Jul 23, 2026	Medium(5.3)	No
Tautulli <= 2.16.1 - Path Traversal CVE-2026-31831	Network Scanner	Jul 23, 2026	High(7.5)	No
Perforce Server - Passwordless User Accounts CVE-2026-6043	Network Scanner	Jul 23, 2026	Critical(9.1)	No