vulnerability-database

This repository is a curated resource for aspiring bug hunters, offering hands-on labs, tools, and structured guidance to support your learning and practical development in the field of ethical hacking and vulnerability research.

osint xss labs cybersecurity bug-bounty sql-injection infosec awesome-list web-security pentesting capture-the-flag metasploitable ethical-hacking security-tools security-research learning-resources exploit-development juice-shop vulnerability-database infosec-resources

Updated Jun 17, 2025

aboutcode-org / vulnerablecode-purl2cpe

Sponsor

Star 5

This repo contains a dump of mappings of NVD's CPEs to purls (package URLs) derived from the VulnerableCode database. package urls created by using VulnerableCode's data. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ and nexB for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/discuss

vulnerability-databases cve cpe nvd vulnerability-identification security-tools purl vulnerability-database vulnerablecode

Updated Aug 21, 2024

Korext / ai-incident-registry

Star 4

Public registry for AI code failures. AICI identifiers. Detection rule mapping. Vendor notification.

devtools code-quality open-standard ai-security vulnerability-database ai-incidents ai-code-failures

Updated May 30, 2026
JavaScript

velvetway / bdu-fstec-mcp

Star 4

MCP-сервер для БДУ ФСТЭК (86 000+ российских уязвимостей). Поиск через SQLite FTS5 с фильтрами по CVSS/опасности/году/вендору, обратный маппинг CVE→БДУ. Обход геоблока через GitHub-зеркало.

python mcp cybersecurity claude bdu vulnerability-database mcp-server fstec russian-cybersecurity

Updated Apr 17, 2026
Python

velvetway / bdu-fstec-mirror

Star 4

Неофициальное зеркало БДУ ФСТЭК без геоблока: XML + XLSX + готовая SQLite-база с FTS5-индексом. 86 000+ уязвимостей, доступно через raw.githubusercontent.com.

mirror cybersecurity infosec cve threat-intelligence security-research bdu cyber-risk vulnerability-database cve-database sqlite-fts5 import-substitution fstec russian-cybersecurity vulnerability-feed data-mirror 152-fz 187-fz

Updated Apr 17, 2026
Python

hecate

0x3e4 / hecate

Star 2

Hecate Cyber Defense - AI-powered vulnerability analysis

security ai mcp self-hosted vulnerability-management vulnerability-scanners software-composition-analysis vulnerability-database

Updated Jun 11, 2026
Python

vuldb / vuldb-api-ruby-examples

Star 1

VulDB Ruby code to fetch data via API

ruby api api-client vulnerability vulnerabilities vulnerability-databases cve nvd vulnerability-management vulnerability-identification vulnerability-database-entry vulnerability-analysis vulnerability-database

Updated May 5, 2026
Ruby

midnightrunai / teampcp-watch

Star 1

Live database of TeamPCP supply chain attack compromises — LiteLLM, Telnyx, Trivy, and more. Includes CLI scanner and REST API.

security pypi incident-response python-security threat-intelligence telnyx vulnerability-database supply-chain-security litellm teampcp

Updated Mar 27, 2026
Python

bawbel / ave

Star 1

AVE - Agentic Vulnerability Enumeration. The open standard for tracking vulnerabilities in AI agent components.

mcp owasp vulnerability ave devsecops ai-agents security-research ai-security vulnerability-database supply-chain-security llm prompt-injection llm-security agentic-ai mcp-server agent-security mcp-security aivss skill-security

Updated May 16, 2026

vuldb / vuldb-api-golang-examples

Star 0

VulDB Google Go code to fetch data via API

go api golang api-client vulnerability vulnerabilities vulnerability-databases cve nvd vulnerability-management vulnerability-identification vulnerability-database-entry vulnerability-analysis vulnerability-database

Updated May 5, 2026
Go

Kuestenlogik / Bowire.VulnDb

Star 0

Community vulnerability database for the Bowire security scanner — multi-protocol API security templates (gRPC, GraphQL, REST, OData, SignalR, WebSocket, MQTT) that bowire scan consumes.

graphql mqtt security rest websocket grpc security-scanner dast api-security vulnerability-database security-templates bowire

Updated May 24, 2026

vuldb / vuldb-api-rust-examples

Star 0

VulDB Rust code to fetch data via API

api rust api-client rust-lang vulnerability vulnerabilities vulnerability-databases cve nvd vulnerability-management vulnerability-identification vulnerability-database-entry vulnerability-analysis vulnerability-database

Updated May 5, 2026
Rust

N3rvz / MiniExploitDB

Star 0

Projet académique de base de données Oracle simulant Exploit DB pour la gestion de vulnérabilités et exploits.

sql database university oracle plsql cybersecurity academic-project oracle-database exploit-database vulnerability-database

Updated Mar 7, 2026
PLSQL

viridis-security / vulncanon

Star 0

Theorem-backed catalog of AI-agent vulnerability classes. Each entry pairs an invariant spec with vulnerable+patched fixtures, a Semgrep detection rule, and mitigation guidance. Maintained by Viridis Security.

ssrf ai-agents responsible-disclosure security-research ai-security vulnerability-database semgrep prompt-injection llm-security viridis-security