Generate MITRE ATT&CK and D3FEND from a list of CVEs. Database with CVE, CWE, CAPEC, MITRE ATT&CK and D3FEND Techniques data is updated daily. Showcased at BlackHat Europe 2025 Arsenal.

Use this bot to monitor new CVEs containing defined keywords and send alerts to Slack and/or Telegram.

LazyHunter is an automated reconnaissance tool designed for bug hunters, leveraging Shodan's InternetDB and CVEDB APIs

Log4j-RCE (CVE-2021-44228) Proof of Concept with additional information

PoC_CVEs

ThreatTracer - A python Script to identify CVE by name & version and more by @FR13ND0x7f

Audit your PHP version for known CVEs and patches

Public Disclosures

BurnWP Advanced Exploiter System instead Scanner & Custom Plugin for Pentester

Wiki漏洞库管理系统&网络安全知识库-渗透测试常见漏洞知识库文档-该网站收集了Web应用层漏洞、中间件安全缺陷、系统配置不当、移动端（Android）安全问题、权限提升、RCE、网络设备及IOT安全。

All the IOC's I have gathered which are used directly involved coronavirus / covid-19 / SARS-CoV-2 cyber attack campaigns

CVE-2024-22274: Authenticated Remote Code Execution in VMware vCenter Server

We would like to request that all contributors please clone a *fresh copy* of this repository since the September 21st maintenance.

Build a CVE library with aggregated CISA, EPSS and CVSS data

Audit your Node version for known CVEs and patches

WonderCMS Authenticated RCE - CVE-2023-41425

CVE-2025-31644: Command Injection in Appliance mode in F5 BIG-IP

An unofficial, RESTful API for NIST's NVD

CVE-2025-20029: Command Injection in TMSH CLI in F5 BIG-IP

CVEs for Integrated Dell Remote Access Controller (iDRAC)