SploitScan

SploitScan 📜 描述 SploitScan 是一款强大且用户友好的工具，旨在简化已知漏洞及其利用概率的识别过程。它赋能网络安全专业人员快速识别并应用已知的测试性漏洞利用代码。对于希望加强安全措施或针对新兴威胁制定稳健检测策略的专业人士来说，该工具尤其有价值。 📖 目录 📜 描述 🌟 功能 💣 支持的漏洞利用数据库 📁 支持的漏洞扫描器导入 ⚙️ 安装 🚀 用法 🤖 AI 驱动的风险评估 🛡️ 补丁优先级系统 🫱🏼‍🫲🏽 贡献 📌 作者 📆 更新日志 🌟 功能 CVE 信息检索 获取漏洞的详细信息。 EPSS 集成 利用漏洞利用预测评分系统（EPSS）的数据检查漏洞被利用的可能性。...

CVE_Prioritizer

CVE Prioritizer CVE Prioritizer 是一款强大的工具，通过结合 CVSS、EPSS、CISA 的 已知被利用漏洞 以及 VulnCheck 的社区资源（NVD++、KEV），帮助您优先处理漏洞补丁。它提供了关于漏洞被利用的可能性以及对信息系统潜在影响的宝贵洞察。 为什么要结合 CVSS、EPSS 和 CISA KEV？ CVEPrioritizer 利用 CVSS 和 EPSS 分数之间的相关性，以增强漏洞修复工作。CVSS 捕捉漏洞的基本属性，而 EPSS 提供数据驱动的威胁信息，使您能够更好地确定补丁优先级。 目录 1. 为什么要结合 CVSS、EPSS ...

cve-scores

Puntuaciones CVE Agregador de Puntuaciones EPSS y VEDAS para CVEs Proveedores de Datos PUNTUACIÓN| MANTENEDOR| PROPÓSITO| COBERTURA| ATRIBUCIÓN| FRECUENCIA ---|---|---|---|---|--- Exploit Prediction Scoring System EPSS| Empirical Security| Predicción de Explotación Futura| 1 Identificador CVE|...

CVE-Vulnerability-Information-Downloader

Descargador de Información de Vulnerabilidades CVE Common Vulnerability Scoring System CVSS es un estándar industrial gratuito y abierto para evaluar la gravedad de las vulnerabilidades de seguridad en sistemas informáticos. Exploit Prediction Scoring System EPSS estima la probabilidad de que una...

CVE-2024-44313

Exploit 🛠️ Case Study: CVE-2024-44313 and EPSS in Vulnerability Prioritization This case study was developed for a talk on EPSS Exploit Prediction Scoring System, demonstrating how the score can influence vulnerability prioritization in practice. The CVE-2024-44313 vulnerability, found in...

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

pocindex

Just landed Stars| Updated| Repository| Description ---|---|---|--- 0⭐| 3h ago| Langflow-RCE-CVE-2025-3248| Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… 1⭐| 7h ago| CVE-2026-32996| A vulnerability in Veeam Agent for Microsoft Windows...

vulnseeker

🔍 VulnSeeker Smart CVE search with exploitability context a...

Exploit for Improper Access Control in Tastyigniter

Exploit 🛠️ Estudo de Caso: CVE-2024-44313 e o EPSS na Prioritiza...

EPSS vs. CVSS: What's the Best Approach to Vulnerability Prioritization?

Many businesses rely on the Common Vulnerability Scoring System CVSS to assess the severity of vulnerabilities for prioritization. While these scores provide some insight into the potential impact of a vulnerability, they don't factor in real-world threat data, such as the likelihood of...

How the Qualys Enterprise TruRisk™ Platform Supports CISA Vulnrichment

Introduction In todays interconnected digital landscape, cybersecurity threats pose significant risks to organizations across various sectors. Recognizing the need for a structured approach to identify, prioritize, and address vulnerabilities, the Cybersecurity and Infrastructure Security Agency...

SploitScan - A Sophisticated Cybersecurity Utility Designed To Provide Detailed Information On Vulnerabilities And Associated Proof-Of-Concept (PoC) Exploits

SploitScan is a powerful and user-friendly tool designed to streamline the process of identifying exploits for known vulnerabilities and their respective exploitation probability. Empowering cybersecurity professionals with the capability to swiftly identify and apply known and test exploits. It'...

Vulristics News: EPSS v3 Support, Integration into Cloud Advisor

Vulristics News: EPSS v3 Support, Integration into Cloud Advisor. Hello everyone! This episode will focus on the news from my open source Vulristics project for vulnerability analysis and prioritization. Alternative video link for Russia: https://vk.com/video-149273431456239122 EPSS v3 The third...

CVE-Vulnerability-Information-Downloader - Downloads Information From NIST (CVSS), First.Org (EPSS), And CISA (Exploited Vulnerabilities) And Combines Them Into One List

Common Vulnerability Scoring System CVSS is a free and open industry standard for assessing the severity of computer system security vulnerabilities. Exploit Prediction Scoring System EPSS estimates the likelihood that a software vulnerability will be exploited in the wild. CISA publishes a list ...