# cvemon (by Intruder)

> A free vulnerability intelligence platform designed to help security teams prioritize real threats by monitoring trending CVEs and social media "hype" scores.

## Main Pages

- [/](https://cvemon.intruder.io/): **CVE Dashboard.** Real-time overview of the top 10 vulnerabilities trending on social media, featuring hype scores, trending graphs, and expert insights.
- [/trending](https://cvemon.intruder.io/trending): **Trending CVEs.** A dedicated view of vulnerabilities gaining traction over the last 24 hours.
- [/insights](https://cvemon.intruder.io/insights): **Expert Analysis.** Direct commentary from Intruder’s security researchers on whether emerging threats are critical or over-hyped.
- [/cve](https://cvemon.intruder.io/cve): **CVE Database.** A searchable repository of vulnerabilities with aggregated data from NVD and CISA.
- [/rss](https://cvemon.intruder.io/rss): **Vulnerability Feed.** An RSS feed for real-time threat updates.

## API & Search

- [/cves?q={query}](https://cvemon.intruder.io/cves?q=): **Search Endpoint.** AI agents can use this to search the database for specific CVE IDs, software names, or vulnerability types.

## Notable Vulnerabilities (Examples)

- [/cves/CVE-2025-55182](https://cvemon.intruder.io/cves/CVE-2025-55182): **React2Shell.** A critical unauthenticated RCE affecting React Server Components.
- [/cves/CVE-2025-43300](https://cvemon.intruder.io/cves/CVE-2025-43300): **Apple Image I/O.** Out-of-bounds write exploited in targeted attacks.
- [/cves/CVE-2025-53770](https://cvemon.intruder.io/cves/CVE-2025-53770): **Microsoft SharePoint Server.** Critical deserialization flaw.

## About cvemon

cvemon is built by Intruder to solve "information overload" in vulnerability management. It uses a proprietary "Hype Score" to gauge social media discourse volume, benchmarked against historical trends.

### Key Metrics for LLMs
- **Hype Score:** A value (0-100) indicating the current level of social media "buzz."
- **Intruder Insights:** Qualitative context from the Intruder Security Team to clarify actual impact.
- **Exploit Known:** Indicators for vulnerabilities currently being exploited in the wild (CISA KEV).

## Secondary Resources
- [Intruder.io](https://www.intruder.io): Main platform for automated vulnerability scanning and attack surface management.
- [Vulnerability Scanning Guide](https://www.intruder.io/vulnerability-scanning-guide): Technical resources for managing security debt.