@blamejs/exceptd-skills 0.13.101 → 0.13.103
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +8 -0
- package/data/_indexes/_meta.json +9 -9
- package/data/_indexes/activity-feed.json +2 -2
- package/data/_indexes/catalog-summaries.json +2 -2
- package/data/_indexes/chains.json +2558 -891
- package/data/atlas-ttps.json +9 -1
- package/data/attack-techniques.json +9 -0
- package/data/cve-catalog.json +438 -98
- package/data/cwe-catalog.json +5 -0
- package/data/framework-control-gaps.json +45 -6
- package/data/zeroday-lessons.json +200 -32
- package/manifest.json +44 -44
- package/package.json +2 -2
- package/sbom.cdx.json +25 -25
package/data/atlas-ttps.json
CHANGED
|
@@ -549,7 +549,9 @@
|
|
|
549
549
|
"last_verified": "2026-05-19",
|
|
550
550
|
"cve_refs": [
|
|
551
551
|
"CVE-2023-44467",
|
|
552
|
+
"CVE-2024-12366",
|
|
552
553
|
"CVE-2024-21513",
|
|
554
|
+
"CVE-2024-5565",
|
|
553
555
|
"CVE-2025-53773",
|
|
554
556
|
"CVE-2025-55319",
|
|
555
557
|
"CVE-2025-68664",
|
|
@@ -1743,6 +1745,7 @@
|
|
|
1743
1745
|
"CVE-2024-6587",
|
|
1744
1746
|
"CVE-2025-30202",
|
|
1745
1747
|
"CVE-2025-32444",
|
|
1748
|
+
"CVE-2025-3248",
|
|
1746
1749
|
"CVE-2025-64496",
|
|
1747
1750
|
"CVE-2025-64513",
|
|
1748
1751
|
"CVE-2025-67818",
|
|
@@ -1751,6 +1754,7 @@
|
|
|
1751
1754
|
"CVE-2026-24214",
|
|
1752
1755
|
"CVE-2026-24215",
|
|
1753
1756
|
"CVE-2026-26190",
|
|
1757
|
+
"CVE-2026-33017",
|
|
1754
1758
|
"CVE-2026-34159",
|
|
1755
1759
|
"CVE-2026-45829"
|
|
1756
1760
|
]
|
|
@@ -3277,7 +3281,11 @@
|
|
|
3277
3281
|
"ATLAS"
|
|
3278
3282
|
],
|
|
3279
3283
|
"stix_id": "attack-pattern--073f16fc-c4c0-5351-8a22-9c77aaaab91f",
|
|
3280
|
-
"is_subtechnique": true
|
|
3284
|
+
"is_subtechnique": true,
|
|
3285
|
+
"cve_refs": [
|
|
3286
|
+
"CVE-2024-12366",
|
|
3287
|
+
"CVE-2024-5565"
|
|
3288
|
+
]
|
|
3281
3289
|
},
|
|
3282
3290
|
"AML.T0051.001": {
|
|
3283
3291
|
"id": "AML.T0051.001",
|
|
@@ -281,6 +281,7 @@
|
|
|
281
281
|
"CVE-2024-11392",
|
|
282
282
|
"CVE-2024-11393",
|
|
283
283
|
"CVE-2024-11394",
|
|
284
|
+
"CVE-2024-12366",
|
|
284
285
|
"CVE-2024-13059",
|
|
285
286
|
"CVE-2024-21513",
|
|
286
287
|
"CVE-2024-21575",
|
|
@@ -289,6 +290,7 @@
|
|
|
289
290
|
"CVE-2024-42479",
|
|
290
291
|
"CVE-2024-4889",
|
|
291
292
|
"CVE-2024-50050",
|
|
293
|
+
"CVE-2024-5565",
|
|
292
294
|
"CVE-2025-1094",
|
|
293
295
|
"CVE-2025-11837",
|
|
294
296
|
"CVE-2025-1550",
|
|
@@ -297,6 +299,7 @@
|
|
|
297
299
|
"CVE-2025-30165",
|
|
298
300
|
"CVE-2025-32434",
|
|
299
301
|
"CVE-2025-32444",
|
|
302
|
+
"CVE-2025-3248",
|
|
300
303
|
"CVE-2025-33236",
|
|
301
304
|
"CVE-2025-34291",
|
|
302
305
|
"CVE-2025-49596",
|
|
@@ -323,6 +326,7 @@
|
|
|
323
326
|
"CVE-2026-30624",
|
|
324
327
|
"CVE-2026-30625",
|
|
325
328
|
"CVE-2026-32202",
|
|
329
|
+
"CVE-2026-33017",
|
|
326
330
|
"CVE-2026-34159",
|
|
327
331
|
"CVE-2026-39884",
|
|
328
332
|
"CVE-2026-39987",
|
|
@@ -373,8 +377,12 @@
|
|
|
373
377
|
"version": "v19",
|
|
374
378
|
"cve_refs": [
|
|
375
379
|
"CVE-2023-44467",
|
|
380
|
+
"CVE-2024-12366",
|
|
376
381
|
"CVE-2024-21513",
|
|
382
|
+
"CVE-2024-5565",
|
|
383
|
+
"CVE-2025-3248",
|
|
377
384
|
"CVE-2025-49844",
|
|
385
|
+
"CVE-2026-33017",
|
|
378
386
|
"MAL-2026-3083"
|
|
379
387
|
],
|
|
380
388
|
"description_full": "Adversaries may abuse Python commands and scripts for execution. Python is a very popular scripting/programming language, with capabilities to perform many functions. Python can be executed interactively from the command-line (via the <code>python.exe</code> interpreter) or via scripts (.py) that can be written and distributed to different systems. Python code can also be compiled into binary executables.(Citation: Zscaler APT31 Covid-19 October 2020) Python comes with many built-in packages to interact with the underlying system, such as file operations and device I/O. Adversaries can use these libraries to download and execute commands or other scripts as well as perform various malicious behaviors.",
|
|
@@ -922,6 +930,7 @@
|
|
|
922
930
|
"CVE-2025-32433",
|
|
923
931
|
"CVE-2025-32444",
|
|
924
932
|
"CVE-2025-32463",
|
|
933
|
+
"CVE-2025-3248",
|
|
925
934
|
"CVE-2025-32706",
|
|
926
935
|
"CVE-2025-32756",
|
|
927
936
|
"CVE-2025-33053",
|