vulnerability-intelligence

MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works with Claude Code, Codex, Gemini CLI, and Claude Desktop.

PatrowlHears - Vulnerability Intelligence Center / Exploits

Centralized platform for aggregating and visualizing global CVE data — including feeds from NVD, MITRE, CNNVD, JVN, CERT-FR, and more. Built to unify vulnerability intelligence across borders.

💎 Vulnerability assessment and vulnerability intelligence tool searching for vulnerabilities and exploits using keywords across multiple sources.

23-tool MCP server for CVE & vulnerability intelligence. NVD, EPSS, CISA KEV, GitHub Advisory, OSV — unified in one server. Risk scoring, bulk triage, exploit search. 2 dependencies, runs with npx.

Linux based vulnerabilities (CVE) exploit detection through runtime security using Falco/Osquery/Yara/Sigma

Shodan MCP server for Claude, Cursor & VS Code. 20 tools for passive reconnaissance, CVE/CPE intelligence, DNS analysis, and device search. 4 tools work free without an API key. OSINT and vulnerability research from your IDE.

CERT/CC's fork of the official Exploit Database repository in which we are tagging commits that include vulnerability IDs. The first commit for an ID we recognize gets the tag for that ID. Aside from adding git tags, we do not otherwise modify the code. Updates hourly.

TESTING - 🌐 Centralized platform for aggregating and visualizing global CVE data — including feeds from NVD, MITRE, CNNVD, JVN, CERT-FR, and more. Built to unify vulnerability intelligence across borders.

Exposure Likelihood Framework (ELF): A Python library for integrating and analyzing vulnerability data to improve management and prioritization.

CERT/CC's fork of Metasploit Framework in which we are tagging commits that include vulnerability IDs. The first commit for an ID we recognize gets the tag for that ID. Aside from adding git tags, we do not otherwise modify the code. Updates hourly.

Vulnerability intelligence API aggregating NVD, OSV, CVE Records (CNA), CISA KEV, and EPSS, plus PSIRT advisories from network appliance vendors (Cisco, Fortinet, Palo Alto Networks, and more) into one searchable REST API. Self-hosted; TypeScript, Fastify, Prisma, PostgreSQL.

Technical OSINT, Artifact Analysis & Verified Reconstruction

A thin, read-only MCP server that brings PatrowlIntel CVE, EPSS, CISA KEV, exploit, and trending-attack data into Claude and any MCP client.

Early vulnerability radar: detects, correlates and enriches vulnerabilities before MITRE/NVD publish them, and measures the lead time each source gains over NVD.

Offline-first Python project for ANSSI bulletin analysis, CVE enrichment, risk prioritization, and Streamlit decision support dashboard.

Top OSS Vulnerability Intelligence 🌟 Star if you like it! 🌟

Official command-line client for the Exploit Intelligence Platform

Recorded Future — independent third-party profile of a public API surface, by API Evangelist. Recorded Future is a threat intelligence platform whose Intelligence Cloud combines open-web, dark-web, technical, and customer telemetry sources via the Intelligence Graph, indexed and analyzed by Insikt Group analysts and AI.

Shuffle SOAR app for mlab.sh: domain, IP, hash, URL, email, phone and crypto scanning, IOC extraction, CVE intelligence and threat-actor data.