vulnerability_exploits
List the known exploits, proofs of concept, and detection templates for a specific CVE.
What this tool does
Returns the exploit maturity of a CVE and the related public material known to SecDB:
Metasploit modules
Exploit-DB entries
Nuclei templates
proofs of concept published on GitHub
When to use this tool
Use this tool when the user asks:
"Is there a public exploit for this CVE?"
"Is there a Metasploit module or a Nuclei template for this vulnerability?"
"How mature is the exploitation of this CVE?"
For other evidence (scanner plugins, social media, MISP), use sightings_search.
Inputs
cve_id: valid CVE identifier (
CVE-YYYY-NNNNN).limit: maximum number of items to return for each kind of material (default 10, maximum 100).
Outputs
exploit_maturity:
score,max, and thesourcesthat contribute to the scoremetasploit: modules, each with
module,name,typeexploitdb: entries, each with
id,description,type,platform,date_publishednuclei: templates, each with
template,name,severitypoc: repositories, each with
name,html_url,descriptiontotals: total number of items for each kind of material, before
limitis applied
LLM usage guidelines
Empty lists mean that SecDB knows no such material, not that the vulnerability cannot be exploited.
Report references and availability only: do not reproduce or write exploit code.
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"cve_id": "<cve_id>"
},
"name": "vulnerability_exploits"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Maximum items for each kind of material | |
| cve_id | Yes | CVE identification (CVE-YYYY-NNNNN) |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| poc | Yes | Proofs of concept | |
| cve_id | Yes | CVE identifier | |
| nuclei | Yes | Nuclei templates | |
| totals | Yes | Total items for each kind of material | |
| exploitdb | Yes | Exploit-DB entries | |
| metasploit | Yes | Metasploit modules | |
| exploit_maturity | Yes | Exploit maturity score and sources |