vulnerability-intelligence

MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works with Claude Code, Codex, Gemini CLI, and Claude Desktop.

PatrowlHears - Vulnerability Intelligence Center / Exploits

Centralized platform for aggregating and visualizing global CVE data — including feeds from NVD, MITRE, CNNVD, JVN, CERT-FR, and more. Built to unify vulnerability intelligence across borders.

💎 Vulnerability assessment and vulnerability intelligence tool searching for vulnerabilities and exploits using keywords across multiple sources.

23-tool MCP server for CVE & vulnerability intelligence. NVD, EPSS, CISA KEV, GitHub Advisory, OSV — unified in one server. Risk scoring, bulk triage, exploit search. 2 dependencies, runs with npx.

Linux based vulnerabilities (CVE) exploit detection through runtime security using Falco/Osquery/Yara/Sigma

Shodan MCP server for Claude, Cursor & VS Code. 20 tools for passive reconnaissance, CVE/CPE intelligence, DNS analysis, and device search. 4 tools work free without an API key. OSINT and vulnerability research from your IDE.

CERT/CC's fork of the official Exploit Database repository in which we are tagging commits that include vulnerability IDs. The first commit for an ID we recognize gets the tag for that ID. Aside from adding git tags, we do not otherwise modify the code. Updates hourly.

TESTING - 🌐 Centralized platform for aggregating and visualizing global CVE data — including feeds from NVD, MITRE, CNNVD, JVN, CERT-FR, and more. Built to unify vulnerability intelligence across borders.

CERT/CC's fork of Metasploit Framework in which we are tagging commits that include vulnerability IDs. The first commit for an ID we recognize gets the tag for that ID. Aside from adding git tags, we do not otherwise modify the code. Updates hourly.

Exposure Likelihood Framework (ELF): A Python library for integrating and analyzing vulnerability data to improve management and prioritization.

A thin, read-only MCP server that brings PatrowlIntel CVE, EPSS, CISA KEV, exploit, and trending-attack data into Claude and any MCP client.

Technical OSINT, Artifact Analysis & Verified Reconstruction

Offline-first Python project for ANSSI bulletin analysis, CVE enrichment, risk prioritization, and Streamlit decision support dashboard.

Query vulnerability databases and security feeds directly through the Model Context Protocol.

Top OSS Vulnerability Intelligence 🌟 Star if you like it! 🌟

Agent-native CVE + bug-bounty-mechanic intelligence as a hosted MCP: ~365k CVEs fused (NVD/KEV/EPSS/OSV/SSVC) ranked exploitation-first, a fact-checker for hallucinated CVEs, and attack-mechanic transfer from ~14k disclosed reports — a memory of real mechanics to borrow and run.

Unified AI-powered cybersecurity platform: phishing URL detection (Random Forest), CVE vulnerability intelligence (FAISS RAG over 350k+ NVD records), LLM threat narratives, AI incident response playbooks, asset-CVE correlation, and red-team URL simulation — built with FastAPI + Groq.

Qtonic Quantum — leading quantum risk and vulnerability intelligence tools and services. Public org landing page.

Built an AI-powered vulnerability intelligence platform using NVD, CISA KEV, EPSS, BGE embeddings, XGBoost, FAISS, SHAP, and Streamlit to predict exploit likelihood for 357K+ CVEs, achieving ROC-AUC 0.99 and PR-AUC 0.87.