search

l3montree-dev / devguard

DevGuard Backend - Manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Security Framework Documentation made easy, Compliance to security Frameworks - OWASP Incubating Project
https://flawfix.dev
Other
33 stars 4 forks source link

Location data #113

Closed connoryang1 closed 1 week ago

connoryang1 commented 1 month ago

Is there currently any way to access location data with regard to exploits/vulnerabilities? The CVEs database table doesn't seem to contain this anywhere. In particular, I am looking to narrow to entries occurring within the UK.

timbastin commented 1 month ago

Hi @Nephrain thanks for the ticket. Exploits and Vulnerabilities are unrelated to any location. Let's think about something like your Firefox-Browser. The vulnerability database does contain a list of vulnerabilities of your firefox browser - if you are using that in germany, in the us or in the uk, the vulnerability just does not differ. The exploit doesnt differ as well.

I think what you are looking for is "Threat Intelligence" based on real cyber attacks. Here is a project I was part of which does something similar: https://github.com/Cybersecurity-Bonn/ThreatIntelligenceDiscordBot

But you wont be able to narrow this down to location either. In the future we are planning to integrate such information as well, to build an alerting like feature. Stay tuned until we get there!