Search and download public exploits from the Vulners database — online, or fully offline from a local SQLite FTS5 index.

python cli security exploit sqlite exploits vulnerability infosec pentesting cve offensive-security red-team exploit-database metasploit security-tools exploitdb vulners offline-search vulnerability-database packetstorm

• Updated Oct 26, 2026
• Python

Search public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context.

security proof-of-concept exploit poc vulnerability infosec pentesting nuclei cve exploit-database metasploit cvss security-tools threat-intelligence security-research exploitdb epss vulnerability-database cve-poc cisa-kev

• Updated Nov 12, 2026
• Python

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

security vulnerability snyk vulnerability-databases vulndb cve cpe nvd vulnerability-detection osv vulnerability-identification vulnerability-scanners cvss security-tools ossindex purl package-url vulnerability-database

• Updated Nov 10, 2026
• Python

Official Python SDK for the Vulners vulnerability-intelligence API — search CVEs, exploits and advisories (CVSS/EPSS/KEV), audit software, Linux/Windows hosts and SBOMs, and stream the whole graph. Typed sync + async clients, 100% v3-compatible, with a built-in MCP server for AI agents.

python security sdk mcp api-client exploits asyncio infosec cve vulnerability-detection exploit-database cvss threat-intelligence vulnerability-scanner vulners sbom epss vulnerability-database vulners-api

• Updated Oct 29, 2026
• Python

PoC_CVEs

osint proof-of-concept exploit cybersecurity penetration-testing poc bug-bounty vulnerability cve nvd offensive-security red-team cvss threat-intelligence security-research vulnerability-database cve-2024 cve-2025

• Updated May 16, 2026
• Shell

Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.2, purl, and vers.

cli database cve nvd vulnerability-detection sca advisories vers purl vulnerability-database

• Updated Nov 3, 2026
• Python

Exploit-Index : The Ultimate CVE Proof of Concept (PoC) & Exploit Database. A zero-API, high-performance aggregator for 0days, vulnerabilities, and Threat Intelligence. Replacing manual searches for elite SOC teams, DevSecOps, and Bug Bounty Hunters.

list database proof-of-concept exploit poc all cve-scanning 0day cvss threat-intelligence proof-of-concepts exploit-code latest exploit-db vulnerability-database 0day-exploit securewithumer exploit-index cummunity-currated-list verified-pocs

• Updated Nov 12, 2026
• Python

This repository is a curated resource for aspiring bug hunters, offering hands-on labs, tools, and structured guidance to support your learning and practical development in the field of ethical hacking and vulnerability research.

osint xss labs cybersecurity bug-bounty sql-injection infosec awesome-list web-security pentesting capture-the-flag metasploitable ethical-hacking security-tools security-research learning-resources exploit-development juice-shop vulnerability-database infosec-resources

• Updated Jun 17, 2025

Every public CVE in one place, free and open source: timeline, newest first, filters, scores, CISA KEV, EPSS and links to primary sources.

open-source security vulnerability cve nvd open-source-project cvss epss vulnerability-database cisa-kev tanstack-start

• Updated Nov 11, 2026
• TypeScript

Self-hosted vulnerability management: CVE database from 9 sources (NVD, EUVD, OSV, GHSA, KEV…), SCA scanning, SBOM/VEX and supply-chain malware detection. Optional AI analysis with local or cloud LLMs.

security ai mcp self-hosted vulnerability-management vulnerability-scanners software-composition-analysis vulnerability-database

• Updated Nov 9, 2026
• Python

Неофициальное зеркало БДУ ФСТЭК без геоблока: XML + XLSX + готовая SQLite-база с FTS5-индексом. 86 000+ уязвимостей, доступно через raw.githubusercontent.com.

mirror cybersecurity infosec cve threat-intelligence security-research bdu cyber-risk vulnerability-database cve-database sqlite-fts5 import-substitution fstec russian-cybersecurity vulnerability-feed data-mirror 152-fz 187-fz

• Updated Nov 7, 2026
• Python

MCP-сервер для БДУ ФСТЭК (86 000+ российских уязвимостей). Поиск через SQLite FTS5 с фильтрами по CVSS/опасности/году/вендору, обратный маппинг CVE→БДУ. Обход геоблока через GitHub-зеркало.

python mcp cybersecurity claude bdu vulnerability-database mcp-server fstec russian-cybersecurity

• Updated Nov 7, 2026
• Python

Self-hosted vulnerability database API: ask "is this version vulnerable?" and get answers from NVD, OSV, CISA KEV, EPSS, distro errata (Red Hat, Oracle Linux) and vendor PSIRTs (Cisco, Fortinet, Palo Alto, ...), with fixed versions.

typescript rest-api postgresql self-hosted vex cve cpe nvd vulnerability-management osv security-advisories cvss devsecops psirt kev epss vulnerability-database vulnerability-intelligence cisa-kev heretix

• Updated Nov 12, 2026
• TypeScript

This repo contains a dump of mappings of NVD's CPEs to purls (package URLs) derived from the VulnerableCode database. package urls created by using VulnerableCode's data. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ and nexB for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/discuss

vulnerability-databases cve cpe nvd vulnerability-identification security-tools purl vulnerability-database vulnerablecode

• Updated Aug 21, 2024

Public registry for AI code failures. AICI identifiers. Detection rule mapping. Vendor notification.

devtools code-quality open-standard ai-security vulnerability-database ai-incidents ai-code-failures

• Updated May 30, 2026
• JavaScript

一体化安全工具箱：5,266 个 GitHub 安全工具索引 + 59,876 条 CVE 本地漏洞库 + 21 个 MCP 工具 + 自建 Kali 镜像 + 原生 macOS 界面。AI 编排，自带 key。

macos swift docker mcp self-hosted penetration-testing cve kali-linux offensive-security security-tools vulnerability-database ai-agent

• Updated Oct 1, 2026
• Python

MCP server: 1,032 verified smart contract vulnerability findings from 10 Sherlock audit contests

solidity ai-agents vulnerability-database smart-contract-security web3-security mcp-server

• Updated Nov 11, 2026
• TypeScript

Attributed fork: explore OSV advisory records, provenance & review capacity with transparent lessons that preserve the upstream database.

github open-source security cybersecurity vulnerability cve osv security-advisories data-quality dependency-management security-research defensive-security vulnerability-database supply-chain-security ghsa interactive-dashboard

• Updated Nov 7, 2026
• Python

Read-only reference API for AVE, the behavioral classification standard for agentic AI components. Not the standard itself, see aveproject/ave.

security rest-api mcp owasp ave reference-implementation open-standard ai-security fastapi vulnerability-database attack-classification ai-components agentic-ai agentic-security

• Updated Nov 10, 2026
• Python

Curated SAST rules, security policies, and vulnerability detection patterns for the Wide ecosystem

wide appsec devsecops security-rules vulnerability-database wide-ecosystem sast-rules ast-patterns

• Updated Nov 9, 2026
• JavaScript