Resources

Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.192 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 195 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Displaying 1 - 25 results out of 195

Pentest-Tools.com Vulnerabilities
Name
Detectable with
Detection added
Severity
Exploitable
with Sniper
Cybersecurity Infrastructure Security Agency (CISA)ForgeRock AM/OpenAM - Remote Code ExecutionNetwork Scanner

Critical(9.8)

Yes
Cybersecurity Infrastructure Security Agency (CISA)Adobe ColdFusion - RDS Arbitrary File WriteNetwork Scanner

Critical(10)

Yes
Cybersecurity Infrastructure Security Agency (CISA)Apache ActiveMQ - Remote Code ExecutionNetwork Scanner

High(8.8)

Yes
Cybersecurity Infrastructure Security Agency (CISA)Joomla JCE - Remote Code ExecutionNetwork Scanner

Critical(10)

Yes
Cybersecurity Infrastructure Security Agency (CISA)wp2shell - WordPress Core 6.9.0-6.9.4 and 7.0.0-7.0.1 - Pre-Auth Batch-Route Confusion leading to SQL InjectionNetwork Scanner

Critical(9.8)

Yes
Cybersecurity Infrastructure Security Agency (CISA)DrayTek Vigor - OS Command InjectionNetwork Scanner

Critical(9.8)

Yes
Cybersecurity Infrastructure Security Agency (CISA)Cisco ISE - Unauthenticated Remote Code ExecutionNetwork Scanner

Critical(9.8)

Yes
Hoverfly - Remote Code ExecutionNetwork Scanner

Critical(9.8)

Yes
Roxy-WI - Remote Code ExecutionNetwork Scanner

Critical(9.8)

Yes
Blink Router (LB-LINK) - OS Command InjectionNetwork Scanner

Critical(9.8)

Yes
Cybersecurity Infrastructure Security Agency (CISA)Aviatrix Controller - Remote Code ExecutionNetwork Scanner

Critical(10)

Yes
Cybersecurity Infrastructure Security Agency (CISA)Hikvision IP camera/NVR - Remote Command ExecutionNetwork Scanner

Critical(9.8)

Yes
Cybersecurity Infrastructure Security Agency (CISA)MeteoBridge <= 6.1 - Remote Code ExecutionNetwork Scanner

High(7.5)

Yes
Cybersecurity Infrastructure Security Agency (CISA)HPE OneView - Remote Code ExecutionNetwork Scanner

Critical(10)

Yes
Cybersecurity Infrastructure Security Agency (CISA)Ivanti Endpoint Manager Mobile - Remote Code ExecutionNetwork Scanner

Critical(9.8)

Yes
Cybersecurity Infrastructure Security Agency (CISA)Telnet inetutils - Authentication BypassNetwork Scanner

Critical(9.8)

Yes
WordPress Post SMTP - Account TakeoverNetwork Scanner

Critical(9.8)

Yes
Cybersecurity Infrastructure Security Agency (CISA)React Server Components - Remote Code Execution (React2Shell)Network Scanner

Critical(10)

Yes
Cybersecurity Infrastructure Security Agency (CISA)Fortinet FortiWeb - Authentication Bypass & Remote Code ExecutionNetwork Scanner

Critical(9.8)

Yes
WordPress Simple File List - Unauthenticated RCENetwork Scanner

Critical(9.8)

Yes
ASP.NET Core - Request SmugglingNetwork Scanner

Critical(9.9)

Yes
Cybersecurity Infrastructure Security Agency (CISA)React Native Community CLI development server - Remote Code ExecutionNetwork Scanner

Critical(9.8)

Yes
Cybersecurity Infrastructure Security Agency (CISA)Oracle E-Business Suite - Remote Code ExecutionNetwork Scanner

Critical(9.8)

Yes
Cybersecurity Infrastructure Security Agency (CISA)Magento & Adobe Commerce - Account TakeoverNetwork Scanner

Critical(9.1)

Yes
Cybersecurity Infrastructure Security Agency (CISA)FreePBX - Authentication Bypass leading to SQL Injection & Remote Code ExecutionNetwork Scanner

Critical(9.8)

Yes