25 matches found
DomainMOD 4.13.0 - Cross-Site Scripting
DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...
SploitScan
SploitScan 📜 Description SploitScan is a powerful and user-friendly tool designed to streamline the process of identifying exploits for known vulnerabilities and their respective exploitation probability. Empowering cybersecurity professionals with the capability to swiftly identify and apply kno...
cve-scores
CVE Scores EPSS & VEDAS Score Aggregator for CVEs Data Providers SCORE| MAINTAINER| PURPOSE| COVERAGE| ATTRIBUTION| FREQUENCY ---|---|---|---|---|--- Exploit Prediction Scoring System EPSS| Empirical Security| Prediction of Future Exploitation| 1 Identifier CVE| Proprietary Data sourced from Data...
CVE_Prioritizer
CVE Prioritizer CVE Prioritizer is a powerful tool that helps you prioritize vulnerability patching by combining CVSS, EPSS, CISA's Known Exploited Vulnerabilities and VulnCheck's community resources NVD++, KEV. It provides valuable insights into the likelihood of exploitation and the potential...
pocindex
PoC Index : Search public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context. Find exploits by CVE, vendor, product or keyword. Compare CVSS severity, EPSS exploitation scores and CISA known-exploited status. Just landed Repo...
fad-checker
fad-checker AKA F ormidable A uditor's D ependency C hecker AKA F uckin' A utonomous D ependency C hecker fad-checker is a polyglot dependency auditor built for professional code audits. It scans 10 ecosystems + 9 CMS/Frameworks WordPress, Drupal, Symfony, Laravel… in one pass, with no build tool...
CVE-Vulnerability-Information-Downloader
CVE Vulnerability Information Downloader Common Vulnerability Scoring System CVSS is a free and open industry standard for assessing the severity of computer system security vulnerabilities. Exploit Prediction Scoring System EPSS estimates the likelihood that a software vulnerability will be...
CVE-2024-44313
Exploit 🛠️ Case Study: CVE-2024-44313 and EPSS in Vulnerability Prioritization This case study was developed for a talk on EPSS Exploit Prediction Scoring System, demonstrating how the score can influence vulnerability prioritization in practice. The CVE-2024-44313 vulnerability, found in...
Ch4120N-CVE-Pulse
⚡ Ch4120N CVE Pulse Live CVE PoC Aggregator with Smart Search & Threat Intelligence CVE Pulse automatically discovers, scores, and indexes CVE Proof‑of‑Concepts from GitHub. It enriches them with EPSS scores and CISA KEV data, builds daily snapshots & diffs, and serves a fast, searchable static...
cve-threat-intelligence-hub
cve · threat-intelligence · vulnerabilities · cisa-kev · epss ·...
When Cyber Scoring Systems Diverge: An Empirical Comparison
Vulnerability scoring systems underpin cyber patch prioritization and risk management, but their comparative behavior is almost always assessed in the abstract, through correlation studies in IT vulnerability databases, rather than by the operational consequences they produce when embedded in a...
vulntriage
VulnTriage A self-hosted correlation layer that turns raw v...
exploit-priority-scanner
exploit-priority-scanner Vulnerability prioritization pipelin...
cve-mcp-server
cve-mcp-server Realtime CVE intelligence over the Model Conte...
vulnseeker
🔍 VulnSeeker Smart CVE search with exploitability context a...
ThreatLens: Evidence-Guided Ranking of High-Priority CVEs
Security teams must prioritize vulnerabilities before exploitation evidence is complete. Existing signals, such as CVSS, EPSS, advisories, and public exploits, are useful but fragmented and time-sensitive; retrospective rankings can therefore overstate performance by using evidence unavailable at...
grype v0.117.0
Grype A vulnerability scanner for container images and filesystems. Features Scan container images , filesystems , and SBOMs for known vulnerabilities see the docs for a full list of supported scan targets Supports major OS package ecosystems Alpine, Debian, Ubuntu, RHEL, Oracle Linux, Amazon...
fleet-cve-scanner v1.1.0
fleet-cve-scanner An open-source, single-script CVE scanner for RMM-managed fleets. Pure PowerShell 7, no agents, no appliances, no license fees. It answers one question for every piece of software on every endpoint you manage: is the installed version known to be vulnerable, and how urgent is it...