Look up CVE vulnerabilities by ID with severity, descriptions, and affected products. Check CVE-2024-3094 before patching decisions — live OSV data, free, no signup. Uses cloud-based processing.
Content reviewed October 2026 · About Toolzum
Look up IP geolocation context — city, region, country, hostname, and ASN/org via ipinfo.io. No blocklist verdicts: abuse and blacklist checks are honest link-outs to AbuseIPDB and VirusTotal. Queried IPs leave the browser by design — live lookup, free, no signup.
Look up domain registration information using public RDAP APIs. Check registrar, expiration date, name servers, and more.
Look up live A, AAAA, CNAME, MX, TXT, and NS records via DNS-over-HTTPS. Queries go to Google DNS — results display here.
Roll dice — d4 through d20 with up to 5 dice — for games and decisions. Totals summed live — free, local, no signup.
Spin a colorful prize wheel with your names — giveaways, classrooms, team picks. Draw winners live with drama — free, local, no signup.
ID, severity score (CVSS), description, affected products/versions, and references. A 9.8 critical with public exploit needs same-day patching; a 4.3 local-only can queue.
Live queries to the OSV vulnerability database — current disclosures, not a stale copy. IDs you query pass through the OSV API by design.
Sort by exploitability: network-attackable + public exploit first, then high CVSS, then everything else. Asset exposure matters more than raw scores.
CVE IDs query the public OSV database — lookups inherently leave the browser. Never append internal hostnames or asset details to queries.
SQL Injection Detector
Scan inputs and queries for SQL injection patterns — tautologies, unions, stacked queries. Catch ' OR '1'='1 before attackers do — local pattern matching, free, no signup.
XSS Protection Checker
Check pasted response headers for XSS-relevant protections — Content-Security-Policy, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, and X-XSS-Protection presence, locally in your browser.