[GitHub] exploited-vulnerabilities-dataset
Exploited and high-severity vulnerabilities (CVE) with CVSS, CISA KEV status, affected versions and sources. JSON, CSV, STIX 2.1. <p align="center"><img src="assets/banner.png" alt="Exploited Vulnera...
"
Comprehensive hub for vulnerability research, exploit analysis, malware investigation, and AI-powered security insights. Access 3,564+ exploits, real-time threat intelligence, and cutting-edge security tools.
Verified Exploits
Malware Samples
Security Tools
Active Threats
Stay updated with the most recent vulnerability discoveries and exploit research
Exploited and high-severity vulnerabilities (CVE) with CVSS, CISA KEV status, affected versions and sources. JSON, CSV, STIX 2.1. <p align="center"><img src="assets/banner.png" alt="Exploited Vulnera...
DSA and DLA for Debian last 14 days # Debian Security Advisories (DSA & DLA) - for the last 14 days **2026-10-28** - **[DSA-6592-1](https://security-tracker.debian.org/tracker/DSA-6592-1)** - chromi...
CVE Tracker project # JGC CVE Tracker JGC CVE Tracker checks the **JVM executing the scanner** and, when an application path is supplied, inspects application dependencies for evidence associated wi...
weblogic CVE-2026-70748,CVE-2026-60672,CVE-2026-35301;PHP CVE-2026-109618 CVE-2026-109619,Node.js CVE-2026-111497,NGINX CVE-2026-42945 CVE-2026-42533 CVE-2026-15176 CVE-2026-93479,Apache HTTPD 2.4.66 ...
Local-first security scanner for projects you are authorized to scan (code, Git history, local HTTP) <p align="center"> <picture> <source media="(prefers-color-scheme: dark)" srcset="docs/asset...
Finds copies of the Google Brotli decoder affected by CVE-2026-111497 on Ubuntu and Debian hosts: the OS packages, and the bundled copies an OS update does not fix (Node.js, Python, Envoy, browsers an...
Search public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context. <div align="center"> <a href="https://pocindex.io/"><img src=...
Exploit-Index : The Ultimate CVE Proof of Concept (PoC) & Exploit Database. A zero-API, high-performance aggregator for 0days, vulnerabilities, and Threat Intelligence. Replacing manual searches for e...
Path Traversal -> RCE in Laranode < 1.2.1 (CWE-22). PoC + advisory writeup. # CVE-2026-100520 — Path Traversal → RCE in Laranode File Manager > Authorized security research. PoC for defensive an...
Sensitive info disclosure via info API in PictShare < 3.7.1 (CWE-522). PoC + advisory writeup. # CVE-2026-104051 — Sensitive Information Disclosure via `info` API in PictShare > Authorized securit...
GPT-4 powered threat analysis and code explanation
Real-time feeds from CISA, MITRE ATT&CK
Safe exploit code viewing and analysis
AI-powered security tool suggestions
Visual threat intelligence dashboards
Email and webhook notifications