cves

Generate MITRE ATT&CK and D3FEND from a list of CVEs. Database with CVE, CWE, CAPEC, MITRE ATT&CK D3FEND and ATLAS Techniques data is updated daily. Showcased at BlackHat Europe 2025 Arsenal.

Use this bot to monitor new CVEs containing defined keywords and send alerts to Slack and/or Telegram.

LazyHunter is an automated reconnaissance tool designed for bug hunters, leveraging Shodan's InternetDB and CVEDB APIs

Log4j-RCE (CVE-2021-44228) Proof of Concept with additional information

ThreatTracer - A tool to identify CVE by name & version and more by @FR13ND0x7f

Audit your PHP version for known CVEs and patches

Public Disclosures

Wiki漏洞库管理系统&网络安全知识库-渗透测试常见漏洞知识库文档-该网站收集了Web应用层漏洞、中间件安全缺陷、系统配置不当、移动端（Android）安全问题、权限提升、RCE、网络设备及IOT安全。

A comprehensive WordPress vulnerability scanner and exploitation framework for authorized penetration testing. This tool automatically detects and exploits multiple WordPress security vulnerabilities (CVEs) to help security professionals identify and patch weaknesses.

All the IOC's I have gathered which are used directly involved coronavirus / covid-19 / SARS-CoV-2 cyber attack campaigns

CVE-2024-22274: Authenticated Remote Code Execution in VMware vCenter Server

We would like to request that all contributors please clone a *fresh copy* of this repository since the September 21st maintenance.

Build a CVE library with aggregated CISA, EPSS and CVSS data

Audit your Node version for known CVEs and patches

WonderCMS Authenticated RCE - CVE-2023-41425

CVE-2025-31644: Command Injection in Appliance mode in F5 BIG-IP

CVEs for Integrated Dell Remote Access Controller (iDRAC)

An unofficial, RESTful API for NIST's NVD

CVE-2025-20029: Command Injection in TMSH CLI in F5 BIG-IP

Exploit for CVE-2022-27226