cve-scores

CVE Scores EPSS & VEDAS Score Aggregator for CVEs Data Providers SCORE| MAINTAINER| PURPOSE| COVERAGE| ATTRIBUTION| FREQUENCY ---|---|---|---|---|--- Exploit Prediction Scoring System EPSS| Empirical Security| Prediction of Future Exploitation| 1 Identifier CVE| Proprietary Data sourced from Data...

SploitScan

SploitScan 📜 Description SploitScan is a powerful and user-friendly tool designed to streamline the process of identifying exploits for known vulnerabilities and their respective exploitation probability. Empowering cybersecurity professionals with the capability to swiftly identify and apply kno...

CVE_Prioritizer

CVE Prioritizer CVE Prioritizer is a powerful tool that helps you prioritize vulnerability patching by combining CVSS, EPSS, CISA's Known Exploited Vulnerabilities and VulnCheck's community resources NVD++, KEV. It provides valuable insights into the likelihood of exploitation and the potential...

CVE-Vulnerability-Information-Downloader

CVE Vulnerability Information Downloader Common Vulnerability Scoring System CVSS is a free and open industry standard for assessing the severity of computer system security vulnerabilities. Exploit Prediction Scoring System EPSS estimates the likelihood that a software vulnerability will be...

CVE-2024-44313

악용 🛠️ 사례 연구: CVE-2024-44313과 EPSS를 통한 취약성 우선순위 지정 이 사례 연구는 EPSSExploit Prediction Scoring System에 관한 강연을 위해 개발되었으며, 점수가 실제로 취약성 우선순위 지정에 어떻게 영향을 미칠 수 있는지 보여줍니다. TastyIgniter 3.7.6에서 발견된 취약점 CVE-2024-44313은 인증되지 않은 사용자가 주문 청구서에 접근하여 금융 및 개인 데이터를 노출할 수 있게 합니다. EPSS 점수: 0.02% 백분위 2.7% 평가일: 19/03/2025...

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

Ch4120N-CVE-Pulse

⚡ Ch4120N CVE Pulse 스마트 검색 및 위협 인텔리전스를 갖춘 실시간 CVE PoC 수집기 CVE Pulse 는 GitHub에서 CVE 개념 증명Proof‑of‑Concept을 자동으로 발견, 점수화, 색인합니다. EPSS 점수 와 CISA KEV 데이터로 강화하고, 일일 스냅샷 및 차이점 을 생성하며, 빠르고 검색 가능한 정적 웹사이트 를 제공합니다 📋 목차 👨‍💻 프로젝트 제작자 🎯 주요 기능 ✨ 핵심 특징 🧱 아키텍처 ⚙️ 작동 방식 🚀 빠른 시작 📦 설치 💻 사용법 하위 명령어 전체 파이프라인 📊 출력 및...

pocindex

최근 등록 Stars| Updated| Repository| Description ---|---|---|--- 0⭐| 46m ago| CVE-2025-47947| libapache2-mod-security2에 대한 POC 0⭐| 9h ago| CVE-2025-8110| Gogs의 PutContents API에서 심볼릭 링크 처리가 부적절하여 로컬 코드 실행이 가능합니다. 1⭐| 1d ago| CVE-2025-29927| react2shell에 대한 POC 0⭐| 1d ago| CVE-2025-59528-Poc| Flowise는...

fad-checker

fad-checker F ormidable A uditor's D ependency C hecker 일명 F uckin' A utonomous D ependency C hecker fad-checker는 모든 소스 트리에서 Maven · Gradle · npm · Yarn · pnpm · Composer · PyPI · NuGet · Go · Ruby , 벤더링된 JavaScript, 커밋된 네이티브 바이너리, 그리고 암호화 자료인증서 및 개인/공개 키를 감사합니다. 멀티 모듈, 모노레포, 폴리글랏을 지원하며, 자체 완결형...

vulnseeker

🔍 VulnSeeker Smart CVE search with exploitability context a...

Exploit for Improper Access Control in Tastyigniter

Exploit 🛠️ Estudo de Caso: CVE-2024-44313 e o EPSS na Prioritiza...

EPSS vs. CVSS: What's the Best Approach to Vulnerability Prioritization?

Many businesses rely on the Common Vulnerability Scoring System CVSS to assess the severity of vulnerabilities for prioritization. While these scores provide some insight into the potential impact of a vulnerability, they don't factor in real-world threat data, such as the likelihood of...

How the Qualys Enterprise TruRisk™ Platform Supports CISA Vulnrichment

Introduction In todays interconnected digital landscape, cybersecurity threats pose significant risks to organizations across various sectors. Recognizing the need for a structured approach to identify, prioritize, and address vulnerabilities, the Cybersecurity and Infrastructure Security Agency...

SploitScan - A Sophisticated Cybersecurity Utility Designed To Provide Detailed Information On Vulnerabilities And Associated Proof-Of-Concept (PoC) Exploits

SploitScan is a powerful and user-friendly tool designed to streamline the process of identifying exploits for known vulnerabilities and their respective exploitation probability. Empowering cybersecurity professionals with the capability to swiftly identify and apply known and test exploits. It'...

Vulristics News: EPSS v3 Support, Integration into Cloud Advisor

Vulristics News: EPSS v3 Support, Integration into Cloud Advisor. Hello everyone! This episode will focus on the news from my open source Vulristics project for vulnerability analysis and prioritization. Alternative video link for Russia: https://vk.com/video-149273431456239122 EPSS v3 The third...

CVE-Vulnerability-Information-Downloader - Downloads Information From NIST (CVSS), First.Org (EPSS), And CISA (Exploited Vulnerabilities) And Combines Them Into One List

Common Vulnerability Scoring System CVSS is a free and open industry standard for assessing the severity of computer system security vulnerabilities. Exploit Prediction Scoring System EPSS estimates the likelihood that a software vulnerability will be exploited in the wild. CISA publishes a list ...