There are 2 repositories under cves topic.
Use this bot to monitor new CVEs containing defined keywords and send alerts to Slack and/or Telegram.
Generate MITRE ATT&CK and D3FEND from a list of CVEs. Database with CVE, CWE, CAPEC, MITRE ATT&CK and D3FEND Techniques data is updated daily. Showcased at BlackHat Europe 2025 Arsenal.
LazyHunter is an automated reconnaissance tool designed for bug hunters, leveraging Shodan's InternetDB and CVEDB APIs
Log4j-RCE (CVE-2021-44228) Proof of Concept with additional information
ThreatTracer - A python Script to identify CVE by name & version and more by @FR13ND0x7F
Audit your PHP version for known CVEs and patches
BurnWP Advanced Exploiter System instead Scanner & Custom Plugin for Pentester
All the IOC's I have gathered which are used directly involved coronavirus / covid-19 / SARS-CoV-2 cyber attack campaigns
CVE-2024-22274: Authenticated Remote Code Execution in VMware vCenter Server
We would like to request that all contributors please clone a *fresh copy* of this repository since the September 21st maintenance.
Build a CVE library with aggregated CISA, EPSS and CVSS data
Wiki漏洞库管理系统&网络安全知识库-渗透测试常见漏洞知识库文档-该网站收集了Web应用层漏洞、中间件安全缺陷、系统配置不当、移动端(Android)安全问题、权限提升、RCE、网络设备及IOT安全。
Audit your Node version for known CVEs and patches
WonderCMS Authenticated RCE - CVE-2023-41425
An unofficial, RESTful API for NIST's NVD
CVE-2025-31644: Command Injection in Appliance mode in F5 BIG-IP
CVE-2025-20029: Command Injection in TMSH CLI in F5 BIG-IP
CERT/CC's fork of the official Exploit Database repository in which we are tagging commits that include vulnerability IDs. The first commit for an ID we recognize gets the tag for that ID. Aside from adding git tags, we do not otherwise modify the code. Updates hourly.
IoT CVEs as abnormal events to evaluate a real-time host-based IDS. https://doi.org/10.1016/j.future.2022.03.001
JSON2YAML is a Python-based utility that simplifies the process of converting CVE (Common Vulnerabilities and Exposures) data from JSON format into well-structured YAML files. This tool allows security analysts and developers to easily manage, analyze, and integrate CVE data into their vulnerability management systems.
CVE-2024-34693: Server Arbitrary File Read in Apache Superset
CVE-2024-37081: Multiple Local Privilege Escalation in VMware vCenter Server
cups-root-file-read.sh | CVE-2012-5519
Receive notifications/alerts on the most recent disclosed CVE's.
CVE-2023-49964: FreeMarker Server-Side Template Injection in Alfresco
Meta risk analysis and scoring system based on open-source fully automated intelligence gathering
CVE-2023-34468: Remote Code Execution via DB Components in Apache NiFi
cWee is an advanced CVE (Common Vulnerabilities and Exposures) searching tool, built on top of the powerful nvdlib library.