pompem
open-sourceThe section your link pointed to isn't on pompem's page any more, so we've brought you to the top.
Automates searching for exploits and vulnerabilities across databases like PacketStorm, Vulners, NVDNVDThe National Vulnerability Database, maintained by NIST, is the U.S. government repository of CVE records enriched with CVSS scores and metadata; cyber tools query it to drive vulnerability prioritization., and WPScan.
Summary
pompem is an open-source command-line tool that automates searching for exploits and vulnerabilities across databases such as PacketStorm, CXSecurity, ZeroDay, Vulners, the National Vulnerability Database, and the WPScan Vulnerability Database. Written in Python and free to use, it takes one or more keywords and returns matching entries, with results optionally written out as HTML or text reports, which suits pentesters and ethical hackers who want a quick cross-database lookup during recon rather than a full scanning engine. It dates to 2014 and has drawn 10 contributors over time, but with no commits in the past year and only one tracked release, it looks dormant rather than actively maintained.
Automates searching for exploits and vulnerabilities across databases like PacketStorm, Vulners, NVD, and WPScan.
How pompem helps
Are there known exploits for the software I found running in this environment?
takes the product name as a keyword and checks it against PacketStorm, CXSecurity, ZeroDay, Vulners, NVD and the WPScan database in one pass, returning matching entries from each
Which of several products turned up during recon actually have public exploits?
accepts a comma-separated list of keywords in a single run and returns matches for each, so a batch of software names can be checked without repeating the search
Has this WordPress plugin or theme got a documented vulnerability?
queries the WPScan Vulnerability Database alongside the general exploit databases, surfacing WordPress-specific entries a generic search would miss
Is a given CMS or appliance version worth flagging in my report before I move on?
returns the matching entries it finds so the analyst can judge relevance, rather than scoring or confirming exploitability itself
How do I hand a client or teammate a record of what turned up during this recon pass?
writes the same search results out as an HTML or text file instead of only printing them to the terminal
Languages
Command line
| option | found in | since | description |
|---|
Values are placeholders taken from each option’s declared default. Nothing is executed here — the output shown is a recording of a run that already happened.
Release-note detail over time
See how much detail pompem puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.
Checking release-note history…
Releases
Nothing shipped since we started watching. Releases and docs updates land here as they happen.
Project health
Issue, contributor and maintainer activity in rfunix/Pompem, 2023-10 – 2026-09, as of 2026-09-25. Twelve-month figures first; the trend lines run the whole window.
- Contributors not measured distinct committers, last 12 months
- Maintainers not measured core set, last 12 months
- Bus factor not measured committers behind half the commits
- Community-filed not measured of issues opened, last 12 months
- Median time to close not measured issues closed, last 12 months
- Open backlog 7 of 19 issues ever filed
- Issues opened / month 0 · 0 communitymaintainers
- Open backlog 7
- Contributors / month not measured
- Commits / month not measured
- Stars 1,037
Counts from the project's public repository and git history; no individuals are identified. Maintainers are the committers covering 80% of the last year's commits. how we measure this
Libraries its release ships
What its latest release locks, checked against known advisories.None of its release's images build from a lockfile we can read.
Add the badge to your README
Maintain this project? The badge links readers straight to this page, so they can follow every release here.
Choose a badge style and copy the code →