{"uid":"cap_Ax6SIKfe1NXHU5wKdkSpM","slug":"2s-cve-exploit-availability-lookup-cb3b8ce7","name":"2s CVE Exploit Availability Lookup","description":"Does public exploit code exist for a CVE, and where? Pass cve (e.g. CVE-2021-44228). Returns hasPublicExploit, the count, hasMetasploitModule and hasVerifiedExploit flags, and the Exploit-DB entries (id, description, type, platform, date, verified, Metasploit flag, link). Bundled inverted index from the Exploit-DB archive (~25k CVEs). This is the triage signal BEYOND security.cve's KEV (exploited in the wild) + EPSS (exploit probability): is the vulnerability actually weaponized with available code? Use the trio together to decide how urgently to patch. Absence is not proof no exploit exists (private/other archives not covered).","url":"https://2s.io/api/security/exploit-availability","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","queryParams"],"properties":{"type":{"const":"http"},"method":{"const":"GET"},"queryParams":{"required":["cve"],"properties":{"cve":{"type":"string","description":"CVE id, e.g. CVE-2021-44228."}}}}}}},"responseSchema":null,"example":{"request":{"input":{"type":"http","method":"GET","queryParams":{"cve":"CVE-2021-44228"}}},"response":{"data":{"ok":true,"items":[{"cve":"CVE-2021-44228","note":"Public exploit code exists (3 Exploit-DB entries). Absence elsewhere is not safety; this reflects the Exploit-DB archive only.","source":{"url":"https://www.exploit-db.com/","license":"Exploit-DB is a public archive; data free for reference with attribution.","provider":"Exploit-DB (Offensive Security) — CVE→exploit index"},"exploits":[{"url":"https://www.exploit-db.com/exploits/51183","date":"2023-04-01","type":"remote","edbId":"51183","platform":"java","verified":false,"metasploit":false,"description":"AD Manager Plus 7122 - Remote Code Execution (RCE)"},{"url":"https://www.exploit-db.com/exploits/50592","date":"2021-12-14","type":"remote","edbId":"50592","platform":"java","verified":false,"metasploit":false,"description":"Apache Log4j 2 - Remote Code Execution (RCE)"},{"url":"https://www.exploit-db.com/exploits/50590","date":"2021-12-14","type":"remote","edbId":"50590","platform":"java","verified":false,"metasploit":false,"description":"Apache Log4j2 2.14.1 - Information Disclosure"}],"exploitCount":3,"hasPublicExploit":true,"hasVerifiedExploit":false,"hasMetasploitModule":false}],"total":1,"source":{"url":"https://www.exploit-db.com/","license":"Exploit-DB is a public archive; data free for reference with attribution.","provider":"Exploit-DB (Offensive Security) — CVE→exploit index"}},"meta":{"cost":{"usd":0.001,"tier":0},"caller":"x402","version":null,"endpoint":"security.exploit-availability","settlement":{"txHash":"0x82637db91eb8ba475a09a1d997bc7133dfb80ffb41b7da6ec84322200a2b152a","network":"eip155:8453","success":true}}}},"exampleRequest":{"cve":"CVE-2021-44228"},"tags":["x402"],"displayCostAmount":"0.001","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"settled","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.001/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.0025","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.0025","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_oO_xKqgW6K2TK9YHt4kiu","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.0025","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns known public exploits for a given CVE ID, including exploit URLs, types, platforms, verification status, and Metasploit module availability.","exampleAgentPrompt":"Can you check whether CVE-2021-44228 (Log4Shell) has any publicly known exploits, and tell me if there's a verified one or a Metasploit module available?","exampleUseCases":null,"resultDescription":"Returns a JSON object containing an array of exploit entries for the queried CVE, each with its Exploit-DB URL, date, type (e.g. remote), platform (e.g. java), Exploit-DB ID, whether it is verified, and whether a Metasploit module exists. Also returns aggregate flags: hasPublicExploit, hasVerifiedExploit, hasMetasploitModule, and total exploit count. Includes source attribution to Exploit-DB.","failureModes":["CVE ID not found or has no recorded exploits — returns empty items array with total 0","Malformed CVE ID format causes validation error","Payment failure via x402 prevents request from being processed","Upstream Exploit-DB data unavailable causes service error"],"whenToPreferThis":"Use this endpoint when you need to quickly determine whether a specific CVE has publicly available exploit code, verified exploits, or Metasploit modules — especially useful for vulnerability prioritization, patch management triage, or security research. Prefer this over manual Exploit-DB searches when an AI agent needs structured, machine-readable exploit availability data for a CVE without requiring API keys or signup.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-13T18:46:14.114Z","isFirstParty":false}