@blamejs/exceptd-skills 0.12.13 → 0.12.15

package/data/exploit-availability.json

@@ -16,6 +16,25 @@
       "note": "Per-entry last_verified governs decay. Skills depending on this catalog must check entry freshness before high-stakes use."
     }
   },
+  "CVE-2025-53773": {
+    "poc_status": "demonstrated",
+    "poc_description": "Demonstrated in controlled environment — adversarial instructions in PR description field trigger code execution via GitHub Copilot interaction.",
+    "weaponization_stage": "demonstrated",
+    "ai_discovery_confirmed": false,
+    "ai_tool_enabled": true,
+    "exploit_complexity": "low",
+    "last_verified": "2026-05-01",
+    "verification_source": "NVD, GitHub Security Advisory"
+  },
+  "CVE-2026-30615": {
+    "poc_status": "partial",
+    "poc_description": "Conceptual exploit demonstrated — malicious MCP server → zero-interaction RCE via AI client vulnerability in Windsurf.",
+    "weaponization_stage": "partial",
+    "ai_discovery_confirmed": false,
+    "exploit_complexity": "low_once_mcp_server_installed",
+    "last_verified": "2026-05-01",
+    "verification_source": "NVD, Windsurf vendor advisory"
+  },
   "CVE-2026-31431": {
     "poc_status": "public",
     "poc_description": "Single-stage deterministic root escalation script, reported as 732 bytes. No race condition. Requires unprivileged local code execution.",
@@ -27,6 +46,30 @@
     "last_verified": "2026-05-01",
     "verification_source": "NVD references, CISA KEV listing, researcher disclosures"
   },
+  "CVE-2026-39884": {
+    "poc_status": "public",
+    "poc_description": "GHSA-4xqg-gf5c-ghwq publishes argv-injection PoC: invoke port_forward MCP tool with resourceName containing space-delimited kubectl flags (--address=0.0.0.0, -n kube-system). Attacker-controllable flags reach kubectl via .split(' ') concatenation.",
+    "weaponization_stage": "partially_weaponized",
+    "ai_discovery_confirmed": false,
+    "ai_assisted_weaponization": false,
+    "exploit_complexity": "low",
+    "complexity_notes": "Requires upstream prompt-injection vector (RAG / PR / issue) to deliver the tainted resourceName to the AI assistant; pure-MCP-server exploitation impractical without an LLM-mediated step.",
+    "active_exploitation": "suspected",
+    "last_verified": "2026-05-13",
+    "verification_source": "NVD, Flux159 GHSA-4xqg-gf5c-ghwq"
+  },
+  "CVE-2026-42208": {
+    "poc_status": "public",
+    "poc_description": "GHSA-r75f-5x8p-qvmc documents the SQL injection sink shape — crafted Authorization header reaches the vulnerable query via error-handling paths. CISA KEV listing 2026-05-08 confirms in-wild exploitation.",
+    "weaponization_stage": "fully_weaponized",
+    "ai_discovery_confirmed": false,
+    "ai_assisted_weaponization": false,
+    "exploit_complexity": "low",
+    "complexity_notes": "Curl-able exploit — POST /chat/completions with SQLi payload in Authorization header. No auth required.",
+    "active_exploitation": "confirmed",
+    "last_verified": "2026-05-13",
+    "verification_source": "NVD, CISA KEV, BerriAI GHSA-r75f-5x8p-qvmc"
+  },
   "CVE-2026-43284": {
     "poc_status": "public",
     "poc_description": "Chain component — exploits ESP/IPsec subsystem. Requires combination with CVE-2026-43500 or independent gadget chain.",
@@ -45,23 +88,28 @@
     "last_verified": "2026-05-01",
     "verification_source": "NVD references, researcher (Hyunwoo Kim) disclosure"
   },
-  "CVE-2025-53773": {
-    "poc_status": "demonstrated",
-    "poc_description": "Demonstrated in controlled environment — adversarial instructions in PR description field trigger code execution via GitHub Copilot interaction.",
-    "weaponization_stage": "demonstrated",
+  "CVE-2026-45321": {
+    "poc_status": "public",
+    "poc_description": "84 malicious versions published across 42 @tanstack/* packages 2026-05-11 — the worm itself IS the PoC. Payload analysis published by multiple researchers within 20 minutes; SHA-256 anchors and C2 infrastructure documented in cve-catalog.json iocs block.",
+    "weaponization_stage": "fully_weaponized",
     "ai_discovery_confirmed": false,
-    "ai_tool_enabled": true,
-    "exploit_complexity": "low",
-    "last_verified": "2026-05-01",
-    "verification_source": "NVD, GitHub Security Advisory"
+    "ai_assisted_weaponization": false,
+    "exploit_complexity": "high",
+    "complexity_notes": "Chain requires upstream maintainer to have pull_request_target plus cache plus id-token:write — present in TanStack but not universally. Downstream consumers experience the chain as a low-complexity install of a yanked-but-cached version.",
+    "active_exploitation": "confirmed",
+    "last_verified": "2026-05-13",
+    "verification_source": "NVD, npmjs.com advisories, TanStack security advisory 2026-05-11"
   },
-  "CVE-2026-30615": {
-    "poc_status": "partial",
-    "poc_description": "Conceptual exploit demonstrated — malicious MCP server → zero-interaction RCE via AI client vulnerability in Windsurf.",
-    "weaponization_stage": "partial",
+  "MAL-2026-3083": {
+    "poc_status": "public",
+    "poc_description": "Orphan commit b1e4b1f3aad0d489ab0e9208031c67402bbb8480 still readable on GitHub. The .pth-file install-time payload mechanism is documented; exfiltration domain igotnofriendsonlineorirl-imgonnakmslmao.skyhanni.cloud was live during the 8h exposure window (2026-04-24 22:20Z through 2026-04-25 ~06:30Z).",
+    "weaponization_stage": "fully_weaponized",
     "ai_discovery_confirmed": false,
-    "exploit_complexity": "low_once_mcp_server_installed",
-    "last_verified": "2026-05-01",
-    "verification_source": "NVD, Windsurf vendor advisory"
+    "ai_assisted_weaponization": false,
+    "exploit_complexity": "low",
+    "complexity_notes": "Primitive is GitHub Actions script injection via ${{ github.event.comment.body }} in a run: step. Anyone with a GitHub account can comment on a public PR.",
+    "active_exploitation": "confirmed",
+    "last_verified": "2026-05-13",
+    "verification_source": "OSV.dev MAL-2026-3083, Snyk SNYK-PYTHON-ELEMENTARYDATA-16316110, StepSecurity forensic writeup, Elementary Data incident report"
   }
 }