ISismalicious
blocklist

Indicators of every CVE exploited in the last 7 days

Changed on
get/edl/exploited-cves

Request

  • Base URL
    https://api.ismalicious.com
  • Auth
    • API key in header X-API-KEY
    • or HTTP bearer
    • or HTTP basic

Query parameters

typestring

ip, domain, url or hash (default: all, one per line).

formatstring

txt (default, one indicator per line), csv (indicator,type,cve,lastSeen) or json.

Response

The list (text/plain, text/csv or application/json). Enterprise: rebuilt hourly; Pro: the day's snapshot (X-Exploited-Snapshot)

Changes