Daily CVE Reporter

Günlük CVE Raporlayıcı

Exploit / Project Details

C# Tue Dec 30 2025

Daily CVE Reporter is an automated security tool designated to keep researchers updated on the latest vulnerabilities. It fetches new CVEs from the National Vulnerability Database every 24 hours, automatically detects if a Proof of Concept (PoC) exploit exists, and presents the data in a clean, interactive HTML report.

Detailed Write-up

Daily CVE Reporter - Project WriteUp

Project Overview

The Daily CVE Reporter is an automated pipeline developed in Python to track, analyze, and visualize newly published Common Vulnerabilities and Exposures (CVEs). It bridges the gap between raw data and actionable intelligence by specifically highlighting vulnerabilities that have available exploit code (PoC), enabling security researchers to prioritize their focus.

Technical Architecture

1. Data Ingestion (cve_fetcher.py)

The system integrates with the NIST NVD API v2.0 to act as the primary source of truth.

  • Dynamic Time Windows: It queries for all vulnerabilities published within a specific timeframe (defaulting to the last 24 hours).
  • Robust Handling: The fetcher implements API authentication to bypass strict rate limits and handles pagination logic to ensure no data is lost during retrieval of large datasets.

2. Exploit Analysis (poc_checker.py)

This component acts as an intelligent filter to distinguish between theoretical risks and practical threats.

  • Heuristic Scanning: It iterates through every reference link associated with a gathered CVE.

  • Targeted Detection: The system specifically looks for tags like "Exploit" and cross-references URLs against a whitelist of known exploit repositories, including:

    • Exploit-DB
    • Packet Storm
    • GitHub Advisories
    • 0day.today

3. Report Generation (reporter.py)

Processed security data is transformed into a user-friendly format using Jinja2 templating.

  • Frontend Technology: The report is built with TailwindCSS, ensuring a responsive and modern design.
  • Interactivity: The HTML report supports client-side searching, pagination (10/25/50/100 items), and a "Show only PoCs" toggle to filter noise, all without requiring a dedicated backend server for viewing.

4. Automation & Deployment (daemon.py)

Designed for "set-and-forget" operations, the system includes a daemon mode.

  • Scheduling: Utilizes the schedule library to trigger the fetch-analyze-report cycle daily.
  • Containerization: The entire application is Dockerized, allowing it to run continuously as a background service on any infrastructure with a restart policy (unless-stopped) ensures high availability.

Github | CibLab

Source Code Explorer
/
Select a file
2024 © Tağmaç Han