vulnerability-database

Search and download public exploits from the Vulners database — online, or fully offline from a local SQLite FTS5 index.

Search public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context.

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

Official Python SDK for the Vulners vulnerability-intelligence API — search CVEs, exploits and advisories (CVSS/EPSS/KEV), audit software, Linux/Windows hosts and SBOMs, and stream the whole graph. Typed sync + async clients, 100% v3-compatible, with a built-in MCP server for AI agents.

PoC_CVEs

Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.2, purl, and vers.

Exploit-Index : The Ultimate CVE Proof of Concept (PoC) & Exploit Database. A zero-API, high-performance aggregator for 0days, vulnerabilities, and Threat Intelligence. Replacing manual searches for elite SOC teams, DevSecOps, and Bug Bounty Hunters.

This repository is a curated resource for aspiring bug hunters, offering hands-on labs, tools, and structured guidance to support your learning and practical development in the field of ethical hacking and vulnerability research.

Every public CVE in one place, free and open source: timeline, newest first, filters, scores, CISA KEV, EPSS and links to primary sources.

Неофициальное зеркало БДУ ФСТЭК без геоблока: XML + XLSX + готовая SQLite-база с FTS5-индексом. 86 000+ уязвимостей, доступно через raw.githubusercontent.com.

MCP-сервер для БДУ ФСТЭК (86 000+ российских уязвимостей). Поиск через SQLite FTS5 с фильтрами по CVSS/опасности/году/вендору, обратный маппинг CVE→БДУ. Обход геоблока через GitHub-зеркало.

This repo contains a dump of mappings of NVD's CPEs to purls (package URLs) derived from the VulnerableCode database. package urls created by using VulnerableCode's data. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ and nexB for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/discuss

Hecate Cyber Defense - AI-powered vulnerability analysis

Public registry for AI code failures. AICI identifiers. Detection rule mapping. Vendor notification.

Self-hosted vulnerability database API: ask "is this version vulnerable?" and get answers from NVD, OSV, CISA KEV, EPSS, distro errata (Red Hat, Oracle Linux) and vendor PSIRTs (Cisco, Fortinet, Palo Alto, ...), with fixed versions.

一体化安全工具箱：5,266 个 GitHub 安全工具索引 + 59,876 条 CVE 本地漏洞库 + 21 个 MCP 工具 + 自建 Kali 镜像 + 原生 macOS 界面。AI 编排，自带 key。

MCP server: 1,032 verified smart contract vulnerability findings from 10 Sherlock audit contests

Attributed fork: explore OSV advisory records, provenance & review capacity with transparent lessons that preserve the upstream database.

Read-only reference API for AVE, the behavioral classification standard for agentic AI components. Not the standard itself, see aveproject/ave.

Live database of TeamPCP supply chain attack compromises — LiteLLM, Telnyx, Trivy, and more. Includes CLI scanner and REST API.