search

PidgeyL / cve-search

cve-search is a tool to import CVE (Common Vulnerabilities and Exposures) and CPE (Common Platform Enumeration) into a MongoDB to facilitate search and processing of CVEs.
http://adulau.github.com/cve-search/
Other
24 stars 4 forks source link

Exploitdb integration #121

Open lvets opened 8 years ago

lvets commented 8 years ago

How are cve-search and exploit-db integrated? The reason I ask is because I expected a link to the exploit-db somehow when opening for instance CVE-2016-0801 in cve-search. This CVE has a page with an exploit on exploit-db.com: https://www.exploit-db.com/exploits/39801/

Thanks in advance!

PidgeyL commented 8 years ago

The reason this is not implemented, is because exploitDB changed their format recently. We didn't want to integrate it yet, while the format was broken. This has been reported to @toolswatch, the developer of vFeed, who fixed this issue. We can now have a look to add this link.

PidgeyL commented 8 years ago

Adding this information would conflict with the way CVE-search automates the displaying of information. If we start making rules like this, to check for specific database keys, to then add another entry, we'll end up creating a monster. Maybe you should report this to the vFeed project?