---
title: "[bojemoi] feat(ml-threat): add CVE/IP matcher pipeline with scikit-learn"
date: 2026-07-05T23:41:35+02:00
draft: false
tags: ["commit", "bojemoi", "main"]
categories: ["Git Activity"]
summary: "Commit 12f83f3 par grafana-watcher dans bojemoi"
author: "grafana-watcher"
---

## Commit `12f83f3`

| | |
|---|---|
| **Repository** | bojemoi |
| **Branch** | `main` |
| **Author** | grafana-watcher |
| **Hash** | `12f83f31a972c45703bc6d31e7e8bd838334f059` |


### Description

New script cve_ip_matcher.py:
- Fetches latest CVEs from NVD API v2 (CVSS >= 6, configurable count)
- Loads hosts + services from MSF DB (port, name, banner)
- TF-IDF vectorization + cosine similarity CVE description/CPE vs banners
- GradientBoostingRegressor scores each (CVE, IP) pair 0-100
- Keyword match table (service name → CPE keywords) for boosting
- CLI: --cve, --cve-count, --top, --json, --importances
- Add psycopg2-binary to requirements

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

### Files Changed

```
A	ml-threat/cve_ip_matcher.py
M	ml-threat/requirements.txt
```

### Diff Summary

```
 ml-threat/cve_ip_matcher.py | 634 ++++++++++++++++++++++++++++++++++++++++++++
 ml-threat/requirements.txt  |   1 +
 2 files changed, 635 insertions(+)
```