Vulnerability Intelligence APIs

Use these APIs to search CVE records, exploit references, OSV and GitHub Security Advisories, and recent vulnerability intelligence. Rate limiting: Requests are limited to 60 requests per minute. Authentication: API key required. Credits: Uses regular credit system for authenticated users.

Vulnerability Search

Search for vulnerabilities by CVE identifier, description, or vendor/product information from the NVD Database. HTTP Request

GET https://fullhunt.io/api/v1/vulnerability-intelligence/vulnerability-search

Query Parameters

Parameter	Description
query	The search query (CVE identifier, description, or vendor/product). Must be 3-50 characters long.

Example Request

curl "https://fullhunt.io/api/v1/vulnerability-intelligence/vulnerability-search?query=CVE-2014-0160" \
  -H "X-API-KEY: xxxx-xxxx-xxxx-xxxxxx"

Example Response

{
  "response": [
    {
      "cve_id": "CVE-2014-0160",
      "title": "CVE-2014-0160",
      "description": "The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.",
      "published_date": "2014-04-07T22:55:03.893",
      "last_modified_date": "2025-09-09T13:33:47.875Z",
      "vuln_status": "Deferred",
      "cvss_v3_score": 7.5,
      "cvss_v3_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "cvss_v2_score": 5,
      "cvss_v2_vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
      "cwes": ["CWE-125"],
      "cpe_ids": ["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],
      "epss_percentile": 0.99985,
      "epss_score": 0.94436,
      "is_exploit_available": true,
      "is_kev": true,
      "references": [
        {
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0160",
          "source": "nvd@nist.gov",
          "tags": ["Third Party Advisory"]
        }
      ]
    }
  ]
}

Exploits Search

Search for exploits, proof-of-concepts, and exploit code from the FullHunt database. HTTP Request

GET https://fullhunt.io/api/v1/vulnerability-intelligence/exploits-search

Query Parameters

Parameter	Description
query	The search query (CVE identifier, exploit title, description, type, or platform). Must be 3-100 characters long.

Example Request

curl "https://fullhunt.io/api/v1/vulnerability-intelligence/exploits-search?query=Flussonic" \
  -H "X-API-KEY: xxxx-xxxx-xxxx-xxxxxx"

Example Response

{
  "response": [
    {
      "edb_id": "33943",
      "cve_id": null,
      "title": "Flussonic Media Server 4.1.25 < 4.3.3 - Arbitrary File Disclosure",
      "file_path": "exploits/aix/dos/33943.txt",
      "author": "BGA Security",
      "type": "dos",
      "platform": "aix",
      "port": "8080",
      "date_published": "2014-07-01",
      "date_added": "2014-07-01",
      "date_updated": "2014-07-01",
      "verified": false,
      "codes": ["OSVDB-108610", "OSVDB-108609"],
      "tags": [],
      "aliases": "",
      "screenshot_url": "",
      "application_url": "",
      "source_url": "",
      "epss_percentile": 0,
      "epss_score": 0,
      "is_kev": false
    }
  ]
}

Advisories Search

Search OSV / GitHub Security Advisories (GHSA, PyPA, RustSec, Go, and more) covering ecosystem and supply-chain vulnerabilities across package managers such as npm, PyPI, Go, crates.io, and Maven. HTTP Request

GET https://fullhunt.io/api/v1/vulnerability-intelligence/advisories-search

Query Parameters

Parameter	Description
query	Advisory identifier (`GHSA-xxxx-yyyy-zzzz`, `PYSEC-...`, `RUSTSEC-...`, `GO-...`), CVE identifier, or free text. Must be 3-100 characters long.
ecosystem	Filter by affected ecosystem (e.g. `npm`, `PyPI`, `Go`, `crates.io`, `Maven`).
package	Filter by affected package (e.g. `npm/lodash`).

At least one of query, ecosystem, or package is required. Example Request

curl "https://fullhunt.io/api/v1/vulnerability-intelligence/advisories-search?query=GHSA-jfh8-c2jp-5v3q" \
  -H "X-API-KEY: xxxx-xxxx-xxxx-xxxxxx"

Example Response

{
  "response": [
    {
      "source": "ghsa",
      "source_id": "GHSA-jfh8-c2jp-5v3q",
      "cve_id": "CVE-2021-44228",
      "aliases": ["CVE-2021-44228"],
      "title": "Remote code injection in Log4j",
      "description": "Log4j2 versions with JNDI features do not protect against attacker-controlled LDAP and related endpoints...",
      "severity": "critical",
      "cvss_v3_score": 10.0,
      "cvss_v3_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
      "cvss_v4_vector": null,
      "cwes": ["CWE-502", "CWE-400", "CWE-20"],
      "affected": [
        {
          "ecosystem": "Maven",
          "package": "org.apache.logging.log4j:log4j-core",
          "purl": "pkg:maven/org.apache.logging.log4j/log4j-core",
          "ranges": [
            { "type": "ECOSYSTEM", "introduced": "2.0", "fixed": "2.15.0", "last_affected": null }
          ],
          "versions": []
        }
      ],
      "ecosystems": ["Maven"],
      "packages": ["Maven/org.apache.logging.log4j:log4j-core"],
      "references": [
        { "url": "https://github.com/advisories/GHSA-jfh8-c2jp-5v3q", "source": "ghsa", "tags": ["WEB"] }
      ],
      "published_date": "2021-12-10T00:00:00Z",
      "last_modified_date": "2023-04-18T00:00:00Z",
      "withdrawn_date": null,
      "github_reviewed": true,
      "is_exploit_available": true,
      "epss_score": 0.94,
      "is_kev": true,
      "reference_url": "https://github.com/advisories/GHSA-jfh8-c2jp-5v3q"
    }
  ]
}

Response Fields

Vulnerability Search Response Fields

Field	Type	Description
`response`	Array	Array of vulnerability objects
`cve_id`	String	Common Vulnerabilities and Exposures identifier
`title`	String	Vulnerability title (usually same as CVE ID)
`description`	String	Detailed vulnerability description
`published_date`	String	Date when vulnerability was published
`last_modified_date`	String	Date when vulnerability information was last updated
`vuln_status`	String	Vulnerability status (Active, Deferred, etc.)
`cvss_v3_score`	Number	CVSS v3.1 base score (0.0-10.0)
`cvss_v3_vector`	String	CVSS v3.1 vector string
`cvss_v2_score`	Number	CVSS v2.0 base score (0.0-10.0)
`cvss_v2_vector`	String	CVSS v2.0 vector string
`cwes`	Array	List of Common Weakness Enumeration identifiers
`cpe_ids`	Array	List of Common Platform Enumeration identifiers
`epss_score`	Number	Exploit Prediction Scoring System score (0.0-1.0)
`epss_percentile`	Number	EPSS percentile ranking (0.0-1.0)
`is_exploit_available`	Boolean	Whether exploits are available for this vulnerability
`is_kev`	Boolean	Whether this is a CISA Known Exploited Vulnerability
`cisa_exploit_add`	String	Date added to CISA KEV catalog
`cisa_action_due`	String	Required action due date from CISA
`references`	Array	List of reference objects with URLs and metadata

Exploits Search Response Fields

Field	Type	Description
`response`	Array	Array of exploit objects
`edb_id`	String	Exploit Database identifier
`cve_id`	String	Related CVE identifier (may be null)
`title`	String	Exploit title
`file_path`	String	Path to exploit file in the database
`author`	String	Exploit author or researcher
`type`	String	Type of exploit (dos, remote, local, etc.)
`platform`	String	Target platform (Windows, Linux, AIX, etc.)
`port`	String	Target port number (if applicable)
`date_published`	String	Date when exploit was published
`date_added`	String	Date when exploit was added to database
`date_updated`	String	Date when exploit was last updated
`verified`	Boolean	Whether the exploit has been verified
`codes`	Array	Reference codes (OSVDB, etc.)
`tags`	Array	Relevant tags for categorization
`aliases`	String	Alternative names or aliases
`epss_score`	Number	Exploit Prediction Scoring System score
`epss_percentile`	Number	EPSS percentile ranking
`is_kev`	Boolean	Whether related to a CISA KEV

Advisories Search Response Fields

Field	Type	Description
`response`	Array	Array of advisory objects
`source`	String	Advisory source database (`ghsa`, `pysec`, `rustsec`, `go`, `osv`, …)
`source_id`	String	Native advisory identifier (e.g. `GHSA-xxxx-yyyy-zzzz`)
`cve_id`	String	Aliased CVE identifier (may be null)
`aliases`	Array	All cross-referenced identifiers (CVE, GHSA, etc.)
`title`	String	Advisory summary/title
`description`	String	Detailed advisory description
`severity`	String	Normalized severity (`low`, `medium`, `high`, `critical`)
`cvss_v3_score`	Number	CVSS v3.x base score (0.0-10.0)
`cvss_v3_vector`	String	CVSS v3.x vector string
`cvss_v4_vector`	String	CVSS v4.0 vector string (if provided)
`cwes`	Array	List of Common Weakness Enumeration identifiers
`affected`	Array	Affected packages, each `{ecosystem, package, purl, ranges[], versions[]}`
`ecosystems`	Array	Distinct affected ecosystems (npm, PyPI, Go, crates.io, …)
`packages`	Array	Distinct affected packages (`ecosystem/name`)
`references`	Array	Reference objects with URLs and tags
`published_date`	String	Date the advisory was published
`last_modified_date`	String	Date the advisory was last modified
`withdrawn_date`	String	Date the advisory was withdrawn (null if active)
`github_reviewed`	Boolean	Whether the advisory was reviewed by GitHub (GHSA)
`is_exploit_available`	Boolean	Whether a public exploit exists for the aliased CVE
`epss_score`	Number	EPSS score for the aliased CVE (0.0-1.0)
`is_kev`	Boolean	Whether the aliased CVE is in a CISA/VulnCheck KEV catalog

Search Behavior

Vulnerability Search

The vulnerability search performs intelligent matching across:

CVE ID matching: Direct CVE identifier search
Title matching: Search in vulnerability titles
Description matching: Full-text search in vulnerability descriptions
CPE matching: Search in Common Platform Enumeration identifiers
Keyword matching: General keyword search across all fields

Exploits Search

The exploits search covers multiple data sources and performs matching across:

Multi-source data: Searches both Exploit-DB and CISA KEV datasets
CVE relationship: Find exploits for specific CVEs
Title matching: Text search in exploit titles
Author matching: Search by exploit author/researcher
Type matching: Search by exploit type (dos, remote, local, etc.)
Platform targeting: Search by target operating system or platform
Source filtering: Filter by data source (exploitdb, kev)

Data Sources in Exploit Search:

ExploitDB: Community-contributed exploit code and proof-of-concepts
Metasploit: Professional penetration testing modules from the Metasploit Framework
CISA KEV: Government-verified Known Exploited Vulnerabilities with federal compliance requirements

Error Responses

Status Code	Error	Description
400	Missing required parameter: query	The query parameter is required
400	Query must be at least 3 characters long	Search query is too short
400	Query must be less than X characters long	Search query exceeds maximum length
401	Unauthorized access	Invalid or missing API key

Use Cases

Security Research

Research specific vulnerabilities and their characteristics
Find exploits for known CVEs
Analyze vulnerability trends and patterns
Investigate security incidents

Vulnerability Management

Enrich vulnerability scan results with detailed information
Prioritize patching based on exploit availability
Track vulnerability disclosure timelines
Assess organizational exposure

Threat Intelligence

Monitor for new exploits targeting your infrastructure
Correlate vulnerabilities with active exploitation
Build threat models based on available exploits
Support incident response with vulnerability context

Security Tool Development

Integrate vulnerability data into security platforms
Build automated vulnerability assessment tools
Create exploit detection mechanisms
Enhance security monitoring capabilities

Penetration Testing

Identify potential attack vectors
Find proof-of-concept exploits for testing
Validate security controls against known exploits
Document findings with vulnerability references

Vulnerability Intelligence Feed

Get the latest vulnerabilities and exploits from the FullHunt intelligence database for the past up to 7 days. This endpoint returns a combined feed of recent vulnerability and exploit data, ideal for monitoring emerging threats. HTTP Request

GET https://fullhunt.io/api/v1/vulnerability-intelligence/feed

Query Parameters

Parameter	Type	Required	Default	Description
days	Integer	No	1	Number of days to look back (1-7). Returns items published within this time window.
page	Integer	No	1	Page number for pagination
per_page	Integer	No	20	Number of results per page (1-100)
type	String	No	all	Filter results by type: `vulnerabilities`, `exploits`, `advisories`, or `all`
keywords	String	No	-	Comma-separated keywords (max 20, case-insensitive) for full-text search across vulnerability and exploit fields. More than 20 returns HTTP 400.
source	String	No	-	Filter the advisories list by source (`ghsa`, `pysec`, `rustsec`, `go`, …)
ecosystem	String	No	-	Filter the advisories list by ecosystem (e.g. `npm`, `PyPI`, `Go`)
package	String	No	-	Filter the advisories list by affected package (e.g. `npm/lodash`)

Example Request

curl "https://fullhunt.io/api/v1/vulnerability-intelligence/feed?days=3&type=all&keywords=openssl,heartbleed&per_page=10" \
  -H "X-API-KEY: xxxx-xxxx-xxxx-xxxxxx"

Example Response

{
  "status": 200,
  "message": "ok",
  "metadata": {
    "total_results": 187,
    "total_vulnerabilities": 98,
    "total_exploits": 44,
    "total_advisories": 45,
    "page": 1,
    "per_page": 10,
    "days": 3,
    "type": "all",
    "keywords": ["openssl", "heartbleed"]
  },
  "vulnerabilities": [
    {
      "name": "CVE-2024-xxxx",
      "id": "CVE-2024-xxxx",
      "cve": "CVE-2024-xxxx",
      "description": "Vulnerability description...",
      "date": "2026-04-20",
      "published": "2026-04-20T00:00:00Z",
      "source": "vulnerability"
    }
  ],
  "exploits": [
    {
      "cve_id": "CVE-2024-xxxx",
      "title": "Exploit Title",
      "author": "Author Name",
      "type": "remote",
      "platform": "linux",
      "full_name": "exploit/linux/remote/xxxxx",
      "vendor": "VendorName",
      "product": "ProductName",
      "date": "2026-04-21",
      "source": "exploit"
    }
  ],
  "advisories": [
    {
      "source": "ghsa",
      "source_id": "GHSA-xxxx-yyyy-zzzz",
      "cve_id": "CVE-2024-xxxx",
      "title": "Prototype pollution in example-package",
      "severity": "high",
      "cvss_v3_score": 7.5,
      "ecosystems": ["npm"],
      "packages": ["npm/example-package"],
      "published_date": "2026-04-21T00:00:00Z",
      "source_name": "GitHub Advisory"
    }
  ]
}

Access Requirements This endpoint requires a paid plan subscription. Accessible to Professional, Enterprise, OEM, Builder, Scale, and Consultant plans. Credits: Each request deducts 1 credit from your account balance.

Keyword Search Behavior

Keywords are matched using full-text search (case-insensitive, word/token based - not arbitrary substring matching). Multiple comma-separated keywords are combined with OR semantics: a result matches if it contains any of the supplied terms. The searchable fields cover the primary identifying and descriptive fields of each record: Vulnerabilities - CVE identifier, name, and description. Exploits - related CVE identifier, title, author, type, platform, full module name, vendor, and product. Advisories - advisory identifier, CVE alias, title, description, and affected package names. The advisories list can additionally be narrowed with the source, ecosystem, and package parameters.

Because matching is token-based, search by whole words (e.g. openssl, heartbleed) rather than partial fragments.

Direct CVE lookup: if the keywords value contains a full CVE identifier (e.g. CVE-2024-1234), the feed performs an exact cve_id match and returns that specific record regardless of the days window.

Feed Use Cases

Threat Monitoring: Stay updated on newly disclosed vulnerabilities and exploits
Daily Threat Briefing: Automate daily intelligence reports from the past 24-72 hours
Emerging Exploit Tracking: Monitor for new exploit code targeting your technology stack
Vulnerability Triage: Quickly identify which recent vulnerabilities have available exploits
Security dashboard feeds: Populate dashboards with recent feed data and the returned cutoff timestamp

Rate Limiting and Credits

Rate Limit: 60 requests per minute per API key (30 requests per minute for the Vulnerability Intelligence Feed)
Credit System: Each API call consumes credits from your account balance
Result Limits:
- Vulnerability Search: Up to 10 results per query
- Exploits Search: Up to 10 results per query
- Advisories Search: Up to 10 results per query
- Vulnerability Intelligence Feed: Up to 100 results per page with pagination

Get Started

Integration Foundations

Core Attack Surface

Search & Intelligence

Enterprise APIs

Nexus APIs

OEM APIs

Public APIs

Generated API Reference

Agentic AI (MCP)

Vulnerability Search

Exploits Search

Advisories Search

Response Fields

Vulnerability Search Response Fields

Exploits Search Response Fields

Advisories Search Response Fields

Search Behavior

Vulnerability Search

Exploits Search

Data Sources in Exploit Search:

Error Responses

Use Cases

Security Research

Vulnerability Management

Threat Intelligence

Security Tool Development

Penetration Testing

Vulnerability Intelligence Feed

Keyword Search Behavior

Feed Use Cases

Rate Limiting and Credits

​Vulnerability Search

​Exploits Search

​Advisories Search

​Response Fields

​Vulnerability Search Response Fields

​Exploits Search Response Fields

​Advisories Search Response Fields

​Search Behavior

​Vulnerability Search

​Exploits Search

​Data Sources in Exploit Search:

​Error Responses

​Use Cases

​Security Research

​Vulnerability Management

​Threat Intelligence

​Security Tool Development

​Penetration Testing

​Vulnerability Intelligence Feed

​Keyword Search Behavior

​Feed Use Cases

​Rate Limiting and Credits

Vulnerability Search

Exploits Search

Advisories Search

Response Fields

Vulnerability Search Response Fields

Exploits Search Response Fields

Advisories Search Response Fields

Search Behavior

Vulnerability Search

Exploits Search

Data Sources in Exploit Search:

Error Responses

Use Cases

Security Research

Vulnerability Management

Threat Intelligence

Security Tool Development

Penetration Testing

Vulnerability Intelligence Feed

Keyword Search Behavior

Feed Use Cases

Rate Limiting and Credits