← Home

Machine-readable PoC API

Every indexed CVE that has public exploit or proof-of-concept signals exposes a stable JSON document at a predictable path. Point an automation agent at it to discover where the code lives and how to test a fix.

Endpoint

GET https://vulnpedia.com/cve/<CVE-ID>/poc.json

Returns 200 with the schema below when PoC signals exist, or 404 when none are known. No auth, no rate limit.

Schema (vulnpedia.poc/1)

{
  "schema": "vulnpedia.poc/1",
  "cve": "CVE-2024-3094",
  "generated": "<ISO-8601>",
  "kev": {
    "since": "2024-03-30",
    "ransomware": false
  },
  "epss": {
    "score": 0.94,
    "percentile": 0.99
  },
  "cvss": {
    "version": "3.1",
    "score": 10,
    "severity": "CRITICAL",
    "vector": "CVSS:3.1/AV:N/..."
  },
  "has_public_poc": true,
  "poc_sources": [
    {
      "kind": "exploitdb",
      "id": "51234",
      "url": "https://www.exploit-db.com/exploits/51234",
      "code": "https://www.exploit-db.com/download/51234",
      "executable": true
    },
    {
      "kind": "nuclei",
      "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/...",
      "template": "http/cves/2024/CVE-2024-3094.yaml",
      "executable": true
    },
    {
      "kind": "reference",
      "url": "https://...",
      "tags": [
        "exploit"
      ],
      "executable": false
    },
    {
      "kind": "github-search",
      "url": "https://github.com/search?q=%22CVE-2024-3094%22&type=repositories",
      "executable": false
    }
  ],
  "test_commands": [
    {
      "tool": "nuclei",
      "cmd": "nuclei -id CVE-2024-3094 -u https://TARGET",
      "note": "Non-destructive check."
    }
  ]
}

Field notes

poc_sources[].kind — one of exploitdb, nuclei, reference (an exploit-tagged CVE reference), or github-search (a discovery link, always present).
executable: true — points at runnable code or a runnable detection template; false — a page/link to review.
test_commands — copy-paste commands to check a target you own. Review any fetched exploit code before running it.

Example

curl -s https://vulnpedia.com/cve/CVE-2024-3094/poc.json | jq '.poc_sources[] | select(.executable)'

Coverage spans the full C