Research and PoC APIs

References, package advisories, vendor assessments and unverified candidates are available for every indexed CVE at /cve/<CVE-ID>/research.json. Candidate listings do not assert a working exploit.

Every indexed CVE with a concrete catalogued public exploit or proof of concept exposes a stable JSON document at a predictable path. Point an automation agent at it to discover where the code lives and how to test a fix.

Endpoint

GET https://vulnpedia.com/cve/<CVE-ID>/poc.json

Returns 200 with the schema below when a concrete PoC resource is catalogued, or 404 when none is catalogued. Advisory tags, search links and detection-only templates do not qualify. Public endpoint; no authentication required.

Schema (vulnpedia.poc/1)

{
  "schema": "vulnpedia.poc/1",
  "cve": "CVE-2024-3094",
  "generated": "<ISO-8601>",
  "kev": {
    "since": "2024-03-30",
    "ransomware": false
  },
  "epss": {
    "score": 0.94,
    "percentile": 0.99
  },
  "cvss": {
    "version": "3.1",
    "score": 10,
    "severity": "CRITICAL",
    "vector": "CVSS:3.1/AV:N/..."
  },
  "has_public_poc": true,
  "poc_sources": [
    {
      "kind": "exploitdb",
      "id": "51234",
      "url": "https://www.exploit-db.com/exploits/51234",
      "code": "https://www.exploit-db.com/download/51234",
      "executable": true
    }
  ],
  "detection_sources": [
    {
      "kind": "nuclei",
      "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3094.yaml",
      "template": "http/cves/2024/CVE-2024-3094.yaml",
      "executable": true
    }
  ],
  "discovery_links": [
    {
      "kind": "github-search",
      "url": "https://github.com/search?q=%22CVE-2024-3094%22&type=repositories",
      "executable": false
    }
  ],
  "test_commands": [
    {
      "tool": "nuclei",
      "cmd": "nuclei -id CVE-2024-3094 -u https://TARGET",
      "note": "Review the detection template and affected versions before use."
    }
  ]
}

Field notes

• poc_sources[].kind — exploitdb, metasploit, or vulncheck-xdb. Only concrete catalogue records appear here. Broad exploit tags on advisories do not establish a public PoC.
• detection_sources lists detection templates; discovery_links lists searches that may return no results. Neither sets has_public_poc.
• poc_candidates — unverified catalogue matches, separate from catalogued resources. verification: catalogued means listed by the named publisher; Vulnpedia has not tested the resource. XDB entries link to a review page and include a repository URL when available.
• executable: true — points at runnable code or a runnable detection template; false — a page/link to review.
• test_commands — copy-paste commands to check a target you own. Review any fetched exploit code before running it.

Example

curl -s https://vulnpedia.com/cve/CVE-2024-3094/poc.json | jq '.poc_sources[] | select(.executable)'

Daily data takes precedence for recent CVEs; the weekly archive refresh rechecks all years for later PoC releases, even when a CVE record has not changed. See source coverage and attribution.