Vulnerability Python Packages

nvdlib

A simple wrapper for the National Vulnerability CVE/CPE API

cve-bin-tool

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

oasislmf

Loss modelling framework.

vulncheck-sdk

A generated Python SDK from VulnCheck's OpenAPI specification

vunnel

Tool for collecting vulnerability data from various sources (used to build the grype database)

yardstick

Compare vulnerability scanners results (to make them better!)

fray

Open-source WAF Security Testing Platform — 7,200+ attack payloads, 98 WAF/CDN fingerprints, AI-powered bypass engine, recon pipeline, beautiful CLI output

pyscan-rs

python dependency vulnerability scanner, written in Rust.

gvm-tools

Remote control your Greenbone Community Edition or Greenbone Enterprise Appliance

secator

secator - the pentester's swiss knife

aboutcode-hashid

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

aboutcode-federated

Federated data utilities

malwoverview

Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.

faradaysec

Open Source Vulnerability Management Platform

telegramsight

A client that retrieves vulnerability observations from a Telegram collector and pushes them to a Vulnerability-Lookup instance.

fedivuln

A client to gather vulnerability-related information from the Fediverse.

vulnparse-pin

Vulnerability Intelligence and Decision Support Engine - Parse, enrich, prioritize, and report on security scan results.

fpvs

Fast Python Vulnerability Scanner

arango-cve-processor

A small python script that enriches Vulnerability STIX Objects with other intel

eip-mcp

Exploit Intelligence Platform MCP Server

vulnerablecode

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

search-vulns

A modular tool to search for known vulnerabilities, exploits and more across various data sources

plecost

The best black-box WordPress security scanner

vulntrain

A tool to generate datasets and models based on vulnerabilities descriptions from @Vulnerability-Lookup.