CVE Index nvd.nist.gov ↗
NIST National Vulnerability Database (NVD)
The US government repository of standards-based vulnerability management data. Provides CVSS scores, CPE vector strings, and official CVE analysis.
Security Links Directory
Curated directory of vulnerability databases, official vendor security bulletins, exploit archives, and threat intelligence news.
Vulnerability Databases & CVE Discovery
Active Exploits cisa.gov ↗
CISA Known Exploited Vulnerabilities (KEV)
Authoritative catalog of vulnerabilities that have been confirmed to be actively exploited in the wild by threat actors.
Canonical Standard cve.mitre.org ↗
MITRE CVE List
The global standard dictionary of Common Vulnerabilities and Exposures (CVE). Primary reference for unique CVE identifiers.
Open Source osv.dev ↗
OSV.dev (Open Source Vulnerabilities)
Google-backed open source vulnerability database. Aggregates precise package version ranges across npm, PyPI, Cargo, Go, Maven, and Crates.
Code & Dependencies github.com ↗
GitHub Security Advisory Database (GHSA)
Curated security advisories mapping CVEs to GitHub repositories, pull requests, dependencies, and fix commits.
Threat Intel vulncheck.com ↗
VulnCheck Intelligence
High-speed vulnerability intelligence aggregator tracking real-time exploitation status, PoC availability, and patch availability.
Exploit Archive exploit-db.com ↗
Exploit-DB
Offensive Security's non-profit archive of public exploits, shellcode drops, and vulnerable software binaries.
Exploit Drop packetstormsecurity.com ↗
Packet Storm Security
Information security portal delivering real-time vulnerability advisories, exploit scripts, security tools, and whitepapers.
Vendor Security Bulletins & Advisory Hubs
Microsoft Official msrc.microsoft.com ↗
Microsoft Security Response Center (MSRC)
Official MSRC Security Update Guide for Patch Tuesday releases, Windows kernel LPEs, Win32k, Hyper-V, and Azure advisories.
Research Lab googleprojectzero.blogspot.com ↗
Google Project Zero
Elite zero-day research team analyzing complex memory corruption, browser engine exploits, kernel LPEs, and sandbox escapes.
0-Day Disclosure zerodayinitiative.com ↗
Zero Day Initiative (ZDI) Advisories
Trend Micro's ZDI portal publishing real-time zero-day disclosures, Pwn2Own competition exploits, and vendor patches.
Linux Official ubuntu.com ↗
Ubuntu Security Notices (USN)
Canonical's security notice database detailing Linux kernel CVEs, eBPF, netfilter, systemd, and glibc security updates.
Linux Official debian.org ↗
Debian Security Information
Debian Project's security tracker and DSA bulletins for Linux distribution vulnerabilities and package patches.
Enterprise Linux access.redhat.com ↗
Red Hat Security Advisories (RHSA)
Red Hat Customer Portal tracking enterprise Linux kernel vulnerabilities, CVE severity ratings, and RHSB bulletins.
Threat Intelligence & Security News
Security News thehackernews.com ↗
The Hacker News (THN)
Leading cybersecurity news platform covering active cyberattacks, nation-state APTs, zero-day disclosures, and malware campaigns.
Incident News bleepingcomputer.com ↗
BleepingComputer
Premier cybersecurity news site specializing in ransomware breakdowns, active zero-day exploitation, and technical incident analysis.
Enterprise Security darkreading.com ↗
Dark Reading
Enterprise cybersecurity news outlet focusing on vulnerability trends, threat intelligence, cloud security, and risk analysis.
Thought Leadership schneier.com ↗
Schneier on Security
Bruce Schneier's renowned blog covering cryptography, security policy, system design, and fundamental privacy analysis.