An open API service indexing awesome lists of open source software.

Common Vulnerabilities and Exposures (CVE)

The Common Vulnerabilities and Exposures (CVE) system provides a reference-method for publicly known information-security vulnerabilities and exposures. The United States’ National Cybersecurity FFRDC, operated by The Mitre Corporation, maintains the system, with funding from the US National Cyber Security Division of the US Department of Homeland Security

https://github.com/whokilleddb/cve-2019-15107

CVE-2019-15107 Webmin Exploit in C

cve exploit poc vulnerability

Last synced: 21 Feb 2025

https://github.com/saharNooby/log4j-vulnerability-patcher-agent

Fixes CVE-2021-44228 in log4j by patching JndiLookup class

agent bytecode cve fix log4j patch

Last synced: 10 Mar 2025

https://github.com/muchdogesec/arango_cve_processor

A small python script that enriches Vulnerability STIX Objects with other intel

capec cpe cve cwe mitre-attack nvd stix2 vulnerability

Last synced: 05 May 2025

https://github.com/juanse77/active-inventory-generator

Active Inventory Report Generator for nmap scan

active-inventory automatic cve excel nmap report vulnerabilities

Last synced: 01 Mar 2025

https://github.com/0x00-0x00/cve-2015-3224

Modification of Metasploit module for RCE in Ruby-On-Rails Console CVE-2015-3224

console cve exploit rails ruby

Last synced: 16 Mar 2025

https://github.com/GuilherveMasco/OPTIC

Online Python Tool for Internet protocol Comparisons

comparison cve internet ipv6 nvd protocol tool

Last synced: 10 Mar 2025

https://github.com/kh4sh3i/CVE-2022-26134

[PoC] Atlassian Confluence (CVE-2022-26134) - Unauthenticated OGNL injection vulnerability (RCE)

atlassian atlassian-jira code confluence confluent-platform cve cve-2022-26134 jira payload poc rce remote

Last synced: 10 Mar 2025

https://github.com/wisespace-io/cve-search

Client library for the CIRCL CVE Search

cve rust vulnerabilities

Last synced: 01 Mar 2025

https://github.com/muchdogesec/cpe2stix

A command line tool that turns NVD CPE records into STIX 2.1 Objects.

cpe cve nvd stix2

Last synced: 11 Jan 2025

https://github.com/seqred-s-a/gxdlmsdirector-cve

CVE-2020-8809 and CVE-2020-8810

advisory ami cosem cve dlms security

Last synced: 10 Mar 2025

https://github.com/hackingyseguridad/CVE-2021-4034

CVE-2021-4034, exploit para escalado de privilegios en SO Linux a root

cve elevar exploit linux privilegios root vuln

Last synced: 10 Mar 2025

https://github.com/postmodern/cve_schema.rb

A Ruby library providing common classes for CVE data and loading it from JSON.

cve cve-schema json ruby

Last synced: 13 Feb 2025

https://github.com/dubniczky/kernel-exploits

Kernel exploits consisting mostly of privilege escalation attacks against core components of Linux distribtions

cve exploit linux linux-exploits linux-kernel

Last synced: 31 Mar 2025

https://github.com/soontao/cve-2017-8046-demo

SPRING DATA REST CVE-2017-8046 DEMO

cve

Last synced: 17 Mar 2025

https://github.com/monke443/cve-2023-40028-ghost-arbitrary-file-read

Arbitrary file read in Ghost-CMS allows an attacker to upload a malicious ZIP file with a symlink.

cve cve-2023-40028 exploit ghost-cms github pentesting security vulnerability

Last synced: 27 Dec 2024

https://github.com/hunthubspace/cve-2024-3105-poc

A PoC Exploit for CVE-2024-3105 - The Woody code snippets – Insert Header Footer Code, AdSense Ads plugin for WordPress Remote Code Execution (RCE)

bugbounty cve cve-2024-3105 ethical-hacking exploit penetration-testing web

Last synced: 26 Mar 2025

https://github.com/b3b0/bluebrary

📘🛠️My self-described "Blue Team Library". A collection of scripts I've used over time to remediate various vulnerabilites.

blueteam cve mitigation patching remediation

Last synced: 22 Mar 2025

https://github.com/kernelerr/vlc-cve-2008-4654-exploit

An EXP could run on Windows x64 against CVE-2008-4654.

cve exploit out-of-memory vlc vlc-media-player

Last synced: 13 Mar 2025

https://github.com/lynk4/cve-2011-2523

Python exploit for vsftpd 2.3.4 - Backdoor Command Execution

cve cve-2011-2523 exploit metasploitable metasploitable-2 metasploitable-3 python vsftpd-exploit

Last synced: 21 Feb 2025

https://github.com/mauvehed/kevvy

A Discord bot for searching the Common Vulnerabilities and Exposures (CVE) list and providing KEV updates.

cve cvss discord kevvy mitre nvd

Last synced: 24 Apr 2025

https://github.com/p1ckzi/cve-2022-35513

CVE-2022-35513 | blink1-pass-decrypt

blink1-pass-decrypt blink1control2 cve cve-2022-35513 exploit

Last synced: 25 Mar 2025

https://github.com/muchdogesec/vulmatch

Vulmatch is a database of CVEs in STIX 2.1 format with a REST API wrapper to access them.

cpe cve nvd vulnerabilities vulnerability

Last synced: 02 May 2025

https://github.com/mbadanoiu/cve-2023-26269

CVE-2023-26269: Misconfigured JMX in Apache James

0-day cve cve-2023-26269 cves local-privilege-escalation mlet unauthenticated

Last synced: 01 Mar 2025

https://github.com/ctron/cve

Mappings of the CVE JSON structures for Rust

cve rust

Last synced: 21 Apr 2025

https://github.com/whokilleddb/CVE-2019-15107

CVE-2019-15107 Webmin Exploit in C

cve exploit poc vulnerability

Last synced: 10 Mar 2025

https://github.com/peiwithhao/hacker-university-of-peiwithhao

peiwithhao's learning journey in network/system security

archlinux course cve fuzzing linux-kernel linux-kernel-module university

Last synced: 09 Apr 2025

https://github.com/spamixofficial/cve-2023-38831

CVE-2023-38831 Proof-of-concept code

cve cve-2023-38831 poc proof-of-concept rust

Last synced: 11 Apr 2025

https://github.com/sneezry/vscode-cve

Show security alert for vulnerable dependencies of Node projects

audit cve nodejs vscode-extension

Last synced: 28 Mar 2025

https://github.com/sa7mon/vulnchest

A collection of vulnerable applications for research purposes

bugbounty cve infosec

Last synced: 01 Mar 2025

https://github.com/xiaomingx/data-medium-posts

hacker and ai and other article to collect.

cve exp hacker medium post rce

Last synced: 18 Feb 2025

https://github.com/ariary/CVE-2021-25741

🪄 Instant shell on kubernetes node with CVE-2021-25741 exploit adaptation

cve hostpath infosec k8s-security kubernetes poc

Last synced: 10 Mar 2025

https://github.com/whokilleddb/CVE-2019-17662

Exploit for CVE-2019-17662 (ThinVNC 1.0b1)

cve cve-2019-17662 exploit poc thinvnc

Last synced: 10 Mar 2025

https://github.com/swapravo/cvesploit

Find SearchSploit exploits by CVE-IDs / dpkg status file

cve exploits searchsploit

Last synced: 10 Mar 2025

https://github.com/oditynet/sleepall

trojan CVE-2024-28085 CVE 28085

28085 cve trojan

Last synced: 04 Apr 2025

https://github.com/SherlockSec/CVE-2020-0601

A Windows Crypto Exploit

cve cve-2020-0601 exploit windows

Last synced: 10 Mar 2025

https://github.com/appatalks/ghes-cve-check

Automate investigating CVE Look-ups against GitHub Enterprise Server (GHES)

check cve ghes

Last synced: 19 Feb 2025

https://github.com/l0wk3y-iaan/discord-cve-notifier

A Python script that periodically checks for new vulnerabilities from the JSON data provided by CISA (Cybersecurity and Infrastructure Security Agency).

automation cisa cve discord

Last synced: 19 Feb 2025

https://github.com/ryosukedtomita/cve_checker

AWS ServerlessFramework with Nist Vulnerability Database(NVD) API

cve nvd serverless

Last synced: 17 Feb 2025

https://github.com/mbadanoiu/cve-2023-51518

CVE-2023-51518: Preauthenticated Java Deserialization via JMX in Apache James

0-day cve cve-2023-51518 cves deserialization local-privilege-escalation pre-authentication

Last synced: 01 Mar 2025

https://github.com/mbadanoiu/cve-2021-46364

CVE-2021-46364: YAML Deserialization in Magnolia CMS

0-day authenticated cve cve-2021-46364 cves deserialization remote-code-execution

Last synced: 01 Mar 2025

https://github.com/mbadanoiu/cve-2022-29063

CVE-2022-29063: Java Deserialization via RMI Connection in Apache OfBiz

0-day cve cve-2022-29063 cves deserialization local-privilege-escalation

Last synced: 01 Mar 2025

https://github.com/t3tra-dev/cve-2025-29927-demo

Next.js における認可バイパスの脆弱性を再現するデモです。

cve demo nextjs vulnerability

Last synced: 29 Mar 2025

https://github.com/raul23/equifax-data-breach

Researching the 2017 Equifax data breach. Saving important notes about this infamous case.

apache attribution cve data-breach equifax java network-intrusion notes vulnerability

Last synced: 03 Mar 2025

https://github.com/whokilleddb/cve-2019-17662

Exploit for CVE-2019-17662 (ThinVNC 1.0b1)

cve cve-2019-17662 exploit poc thinvnc

Last synced: 21 Feb 2025

https://github.com/cyllective/cves

This is a list of CVE's discovered by us

cve vulnerabilities vulnerability

Last synced: 02 Apr 2025

https://github.com/s9ra16bf4/exploits

Proof-of-concept for known security issues

cve cve-2019-13623 exploit exploits ghidra golang

Last synced: 21 Feb 2025

https://github.com/krisinfosec/slowest_cve_aggregator

The slowest CVE aggregator - old-fashioned CLI tool in Rust

cve cybersecurity rust rust-lang

Last synced: 09 Mar 2025

https://github.com/marwan-ahmed-23/linux-security-dashboard

An open-source Linux Security Dashboard for monitoring system security, auditing configurations, and generating detailed reports.

audit cve dashboard linux monitoring open-source security

Last synced: 05 Jan 2025

https://github.com/postmodern/nvd-json_feeds.rb

Provides a Ruby API to NVD JSON Feeds.

cve feeds gem json nvd parser ruby

Last synced: 04 Mar 2025

https://github.com/password123456/nvd-cve-database

The Common Vulnerabilities Exposures (CVE) Database

cve nvd vulnerability-databases vulnerability-identification

Last synced: 21 Feb 2025

https://github.com/cpan-security/test-cve

Test distribution for CVE's

cve perl test

Last synced: 12 Apr 2025

https://github.com/vincentscode/cve-2024-34313

☣️ This repository contains the description and a proof of concept for CVE-2024-34313

cve security-research

Last synced: 02 Mar 2025

https://github.com/5fingers/cve-notifier

A python tool for sending email notifications about latest CVE trends

cve notifications

Last synced: 20 Feb 2025

https://github.com/kallydev/poc

Proof of Concept.

cve poc

Last synced: 09 Mar 2025

https://github.com/mbadanoiu/cve-2021-20253

CVE-2021-20253: Privilege Escalation via Job Isolation Escape in Ansible Tower

0-day cve cve-2021-20253 cves local-privilege-escalation

Last synced: 01 Mar 2025

https://github.com/travispaul/node-nvd-search

(Unofficial) node module to fetch, cache, and perform offline search of the NIST National Vulnerability Database.

cve nvd

Last synced: 10 Apr 2025

https://github.com/mauricelambert/cve-2021-42013

These Nmap, Python and Ruby scripts detects and exploits CVE-2021-42013 with RCE and local file disclosure.

cve cve-2021-42013 detection exploit metasploit nmap python3 rce ruby scanner vulnerability

Last synced: 04 Mar 2025

https://github.com/mauricelambert/cve-2021-41773

These Metasploit, Nmap, Python and Ruby scripts detects and exploits CVE-2021-41773 with RCE and local file disclosure.

cve cve-2021-41773 detection exploit metasploit nmap python3 rce ruby scanner vulnerability

Last synced: 04 Mar 2025

https://github.com/muchdogesec/cti_knowledge_base_store

A repository that stores CTI Knowledge-bases in versioned STIX 2.1 Bundles.

cpe cve disarm mitre-attack mitre-capec mitre-cwe nvd sigma-rules stix2 stix2-extensions yara yara-rules

Last synced: 01 Mar 2025

https://github.com/Sneezry/vscode-cve

Show security alert for vulnerable dependencies of Node projects

audit cve nodejs vscode-extension

Last synced: 10 Mar 2025

https://github.com/dawnofdedsec/cve-writeups

Welcome to the CVE Write-Up Repository! This repository serves as a comprehensive collection of detailed write-ups and analyses for various Common Vulnerabilities and Exposures (CVEs). Each write-up includes an in-depth explanation of the vulnerability, its impact, affected systems, proof-of-concept (PoC) exploits, and mitigation strategies.

application cve security web

Last synced: 25 Mar 2025

https://github.com/m-ah07/linux-security-dashboard

A Flask-based interactive dashboard for monitoring Linux system security. It provides real-time insights into system information, open ports, running processes, and failed login attempts. The dashboard is designed to enhance system monitoring with Basic Auth protection, Slack notifications, and Docker support for seamless deployment.

audit cve dashboard docker flask linux monitoring open-ports open-source security slack-alerts system-info

Last synced: 20 Feb 2025

https://github.com/brayanhenao/cve-notifications-app

It is an application that monitors new CVEs that are announced for the dependencies that are being tracked and notify them via Slack Webhook message to a specific channel.

cve go slack

Last synced: 22 Feb 2025

https://github.com/gsmith257-cyber/bit3434cve

BI T3434 Project on data mining CVEs and Exploits

cve data data-mining exploits research-project

Last synced: 24 Feb 2025

https://github.com/michaelpgalen/CVE-DataVis-Prototype-JS

A vanilla javascript prototype for a React data visualization project.

cve data-visualization vanilla-javascript vanilla-js

Last synced: 10 Mar 2025

https://github.com/shadawck/scabi

Implement vulnerabilities scanning on top of package management system like apt, pip, composer...

cve dependencies mitre ossindex package-manager python scanner security security-audit security-tools vulnerability

Last synced: 05 Mar 2025

https://github.com/vulnsphere/paddlepaddle_poc

This is the PoC repository of PaddlePaddle. Updating...

cve paddlepaddle

Last synced: 01 Apr 2025

https://github.com/shamo0/CVE-2022-1388

BIG-IP iControl REST vulnerability CVE-2022-1388 PoC

1388 2022 bash bigip cve cve-2022-1388 exploit f5 icontrol python rest script shell vulnerabilit

Last synced: 10 Mar 2025

https://github.com/anshvaid4/follinatest

Reference of code has been taken from https://github.com/JohnHammond/msdt-follina/blob/main/follina.py. I have given the explanation of the code and made the code a bit simplified.

cve exploit follina

Last synced: 27 Mar 2025

https://github.com/lquerel/cve-list

In-memory database of CVEs created from a local cache of https://github.com/CVEProject/cvelistV5

cve cwe vulnerability

Last synced: 04 Apr 2025