Vulnerability PoC & Defense Rules¶
6152 CVE entries with detection-only proof-of-concept code and reproducible Docker labs. 525 entries also ship ready-to-deploy detection and prevention rules — Snort, YARA, Nginx, and Apache — for high-severity CVEs.
Built for defenders: authorized security testing, penetration testing, blue-team detection engineering, CTF challenges, and security research. Maintained by the SeekersLab team.
Authorized use only
PoC code is for already-public CVEs and for systems you own or are explicitly authorized to test. Unauthorized access is illegal.
Find a CVE by what you need¶
Each flagship entry answers, on one page, the questions defenders search for:
- detection rule / Snort rule / YARA rule — ready-to-deploy IDS and file/memory signatures.
- prevention / Nginx mitigation / WAF rule / Apache mitigation — web-server blocking rules.
- PoC / proof of concept — a detection-only PoC for validating your rules in the lab.
- how to detect / how to block a CVE — the answer-first summary at the top of each entry.
- affected versions — vendor, product, and severity, sourced to NVD.
Browse¶
- Detection & prevention rules catalog — all 525 entries with ready-to-deploy Snort/YARA/Nginx/Apache rules.
- Actively exploited (CISA KEV) — 946 entries on the CISA Known Exploited Vulnerabilities catalog; patch and detect these first.
- Vendors — CVEs grouped by vendor.
- By year — see the table below.
| Year | Entries | With detection & prevention rules |
|---|---|---|
| 2026 | 3755 | 45 |
| 2025 | 1197 | 22 |
| 2024 | 457 | 410 |
| 2023 | 116 | 45 |
| 2022 | 82 | 3 |
| 2021 | 114 | 0 |
| 2020 | 86 | 0 |
| 2019 | 58 | 0 |
| 2018 | 49 | 0 |
| 2017 | 52 | 0 |
| 2016 | 27 | 0 |
| 2015 | 26 | 0 |
| 2014 | 22 | 0 |
| 2013 | 20 | 0 |
| 2012 | 15 | 0 |
| 2011 | 5 | 0 |
| 2010 | 8 | 0 |
| 2009 | 4 | 0 |
| 2008 | 2 | 0 |
| 2007 | 2 | 0 |
| 2006 | 1 | 0 |
| 2005 | 1 | 0 |
| 2000 | 33 | 0 |
| 1999 | 20 | 0 |
Use the search box (top) to find any CVE by id, product, or rule type.