cve-analysis

An AI-driven vulnerability scanner that uses Nmap to discover open services on a user-supplied IP, matches each service to relevant CVEs via SBERT embeddings and a severity classifier, and generates tailored remediation steps using a fine-tuned T5 model.

AI OSINT Security Analyzer is an intelligent platform that leverages AI to perform autonomous investigations across various intelligence sources. With features like multi-source integration and real-time threat intelligence, it ensures comprehensive security assessments. 🛡️🔍

Threat Intelligence Research | CVE Analysis | IoCs | MITRE ATT&CK | STIX/TAXII | Detection Engineering

A client-server application for CVE analysis and exploit detection with bilingual support, detailed reports, and a modern web interface.

CVE-2025-55177 + CVE-2025-43300: reverse-engineering the WhatsApp-ImageIO zero-click iOS chain, with interactive labs.

Professional vulnerability assessment report for LiteLLM command injection risk, including executive summary, technical impact, remediation, and mitigation strategy.

Professional vulnerability assessment report for SharePoint deserialization risk, including executive summary, technical impact, remediation, and mitigation strategy.

Professional vulnerability assessment report for GlobalProtect authentication control weakness, including technical impact, remediation, and mitigation strategy.

🛡️ CyberPulse – AI-Powered Vulnerability Management System A full-stack platform for automated vulnerability assessment and remediation. CyberPulse processes OpenVAS XML reports, integrates real-time threat intelligence (NVD, Vulners, Shodan), and uses AI models to recommend fixes, predict severity, and visualize risks through dashboard

An autonomous n8n workflow that analyzes security scan data with a local LLM and triggers alerts on critical vulnerabilities

Professional vulnerability assessment report for NetScaler SAML memory disclosure risk, including technical impact, remediation, and mitigation strategy.

Laboratorio pedagógico de CVE-2026-93485 (Comment2Shell): stored XSS no autenticado en WordPress core vía wpautop -> RCE, con demo del root cause auto-verificada, control 7.1.1 y la vía Post2Shell

AI Powered Full-Stack CVE Analysis Utility

A powerful, Python-based network vulnerability scanner featuring multi-threaded port scanning, smart CVE lookup, active credential auditing (SSH/MySQL), and zero-dependency HTML reporting.

A multi-threaded Python GUI tool for stealth SYN scanning and automated CVE vulnerability analysis using the NIST NVD API.

Professional vulnerability assessment report for Chrome V8 sandbox boundary risk, including technical impact, remediation, and mitigation strategy.

A lightweight Python script that recursively parses local directories and integrates with the dbcve.org database to identify known system vulnerabilities.

Professional vulnerability assessment report for osTicket stored cross-site scripting, including business impact, remediation, and mitigation strategy.

Project for Security Verification and Testing Exam @ Polito - eBPF Vulnerability Analysis and Classification: an automated pipeline to identify security flaws and develop proof-of-concept exploits by systematically parsing over 260,000 CVE records.

Professional vulnerability assessment report for Apache Camel Docling argument validation risk, including technical impact, remediation, and mitigation strategy.