vulnerability-database

Search and download public exploits from the Vulners database — online, or fully offline from a local SQLite FTS5 index.

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

Official Python SDK for the Vulners vulnerability-intelligence API — search CVEs, exploits and advisories (CVSS/EPSS/KEV), audit software, Linux/Windows hosts and SBOMs, and stream the whole graph. Typed sync + async clients, 100% v3-compatible, with a built-in MCP server for AI agents.

PoC_CVEs

Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.2, purl, and vers.

This repository is a curated resource for aspiring bug hunters, offering hands-on labs, tools, and structured guidance to support your learning and practical development in the field of ethical hacking and vulnerability research.

This repo contains a dump of mappings of NVD's CPEs to purls (package URLs) derived from the VulnerableCode database. package urls created by using VulnerableCode's data. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ and nexB for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/discuss

Public registry for AI code failures. AICI identifiers. Detection rule mapping. Vendor notification.

Неофициальное зеркало БДУ ФСТЭК без геоблока: XML + XLSX + готовая SQLite-база с FTS5-индексом. 86 000+ уязвимостей, доступно через raw.githubusercontent.com.

MCP-сервер для БДУ ФСТЭК (86 000+ российских уязвимостей). Поиск через SQLite FTS5 с фильтрами по CVSS/опасности/году/вендору, обратный маппинг CVE→БДУ. Обход геоблока через GitHub-зеркало.

Hecate Cyber Defense - AI-powered vulnerability analysis

Read-only reference API for AVE, the behavioral classification standard for agentic AI components. Not the standard itself, see aveproject/ave.

Live database of TeamPCP supply chain attack compromises — LiteLLM, Telnyx, Trivy, and more. Includes CLI scanner and REST API.

VulDB Ruby code to fetch data via API

Multi-vendor CVE / vulnerability aggregation system — syncs 20+ sources into one unified schema, served over GraphQL.

Theorem-backed catalog of AI-agent vulnerability classes. Each entry pairs an invariant spec with vulnerable+patched fixtures, a Semgrep detection rule, and mitigation guidance. Maintained by Viridis Security.

Cybersecurity threat intelligence for AI agents — CVE search, EPSS exploit prediction, CISA KEV, IP reputation, threat feed. MCP + x402.

VulDB Perl code to fetch data via API

Projet académique de base de données Oracle simulant Exploit DB pour la gestion de vulnérabilités et exploits.

VulDB Rust code to fetch data via API