Resources

Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.017 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 190 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Displaying 1 - 25 results out of 17.017

Pentest-Tools.com Vulnerabilities
Name	Detectable with	Detection added	Severity	Exploitable with Sniper
Drag and Drop Multiple File Upload - CF7 <= 1.3.9.6 - Remote Code Execution CVE-2026-5718	Network Scanner	May 15, 2026	Critical(9.8)	No
WordPress LiveChat < 3.7.6 - Unauthenticated Stored XSS	Network Scanner	May 15, 2026	High	No
Squid Proxy - HTTP Authentication Credentials Disclosure CVE-2025-62168	Network Scanner	May 14, 2026	Critical(10)	No
Infinispan - Default Admin Login	Network Scanner	May 14, 2026	High	No
LiteLLM Proxy - Model Exposure	Network Scanner	May 14, 2026	Medium	No
phpVMS < 7.0.6 - Legacy Importer Authorization Bypass CVE-2026-42569	Network Scanner	May 14, 2026	Critical(9.4)	No
Spring Boot Actuator SBOM - Exposure	Network Scanner	May 14, 2026	Low	No
MagicMirror <= 2.35.0 - Server-Side Request Forgery CVE-2026-42281	Network Scanner	May 14, 2026	Critical(9.2)	No
Ninja Forms File Uploads <= 3.3.26 - Arbitrary File Upload CVE-2026-0740	Network Scanner	May 14, 2026	Critical(9.8)	No
Apache Tomcat Tribes EncryptInterceptor Bypass - Remote Code Execution CVE-2026-34486	Network Scanner	May 14, 2026	Critical(9.8)	No
dash-uploader 0.1.0 - 0.7.0a2 - Unauthenticated Arbitrary File Write via Path Traversal CVE-2026-38360	Network Scanner	May 13, 2026	Critical(9.8)	No
sar2html <=3.2.2 Plot Parameter - Remote Code Execution CVE-2025-34030	Network Scanner	May 13, 2026	Critical(10)	No
dash-uploader 0.1.0 - 0.7.0a2 - Denial-of-Service via flowTotalChunks CVE-2026-38361	Network Scanner	May 13, 2026	High(7.5)	No
EspoCRM <= 9.3.3 - Server-Side Request Forgery CVE-2026-33534	Network Scanner	May 13, 2026	Medium(4.3)	No
Appsmith <= v1.97 - Information Disclosure	Network Scanner	May 13, 2026	Medium	No
WordPress Campress Theme <= 1.35 - Unauthenticated Local File Inclusion CVE-2024-10763	Network Scanner	May 12, 2026	Critical(9.8)	No
LoLLMS WebUI < 9.8 - Path Traversal CVE-2024-4322	Network Scanner	May 11, 2026	High(7.5)	No
WordPress Formality Plugin <= 1.5.9 - Local File Inclusion CVE-2025-48157	Network Scanner	May 11, 2026	Critical(9.8)	No
TI WooCommerce Wishlist <= 2.9.2 - Arbitrary File Upload CVE-2025-47577	Network Scanner	May 11, 2026	Critical(9.8)	No
Cloudlog - SQL Injection CVE-2024-48259	Network Scanner	May 11, 2026	High(7.3)	No
ASP.NET Trace.AXD - Exposure	Network Scanner	May 11, 2026	Low	No
Tattile Camera < 1.181.5 - Default Login CVE-2026-26341	Network Scanner	May 11, 2026	Critical(9.3)	No
IBM MobileFirst Foundation - Default Credentials	Network Scanner	May 9, 2026	Critical	No
Hoppscotch <= 2026.2.1 - Open Redirect CVE-2026-34847	Network Scanner	May 8, 2026	Medium(4.7)	No
Coveralls Configuration File Exposure	Network Scanner	May 8, 2026	Medium	No