@blamejs/exceptd-skills 0.13.123 → 0.13.124

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 0.13.124 — 2026-05-26
+
+CVE catalog — stable-diffusion-webui (AUTOMATIC1111). Adds **CVE-2024-31462** in the most widely deployed Stable Diffusion web UI. The Backup/Restore tab (`save_config_state` in `modules/ui_extensions.py`) builds a file path from an unvalidated user-supplied config-state name and opens it for writing, yielding a limited file write (JSON files to arbitrary locations) on Windows (CWE-22; GitHub CNA CVSS v3.1 6.3; GHSL-2024-010). The advisory tested 1.7.0, but the CVE/OSV record marks releases through 1.8.0 as affected — fixed by commit `d9708c92`, so upgrading 1.7.0 → 1.8.0 is **not** sufficient. Reuses the AI-runtime-API path-traversal validation control (NEW-CTRL-094). CVE count 416 → 417.
+
 ## 0.13.123 — 2026-05-26
 
 CVE catalog — n8n AI-workflow / automation platform. Adds two flaws in n8n (joining the already-catalogued CVE-2025-68613 expression-injection RCE). **CVE-2026-21858** (GitHub CNA CVSS v3.1 10.0 CRITICAL) — versions 1.65.0 to before 1.121.0 let an unauthenticated attacker access files on the underlying server through form-based actions with no path confinement (CWE-20); fixed in 1.121.0. On locally deployed instances the public exploit chains the read into host RCE — read the DB/config, forge an admin session, then run host commands via the Execute Command node — so the entry maps command-execution and valid-accounts TTPs alongside the file read. Reuses the AI-runtime-API path-traversal validation control (NEW-CTRL-094). **CVE-2025-68668** (CVSS v3.1 9.9) — the Python Code Node's Pyodide sandbox is bypassable, so an authenticated workflow editor runs code with host privileges (CWE-693 protection-mechanism failure); fixed in 2.0.0. Reuses the AI-app-builder execution-endpoint auth-and-sandbox control (NEW-CTRL-103), shared with the Dify code-node escape and Langflow/Flowise RCEs. CVE count 414 → 416.

package/data/_indexes/_meta.json

@@ -1,21 +1,21 @@
 {
   "schema_version": "1.1.0",
-  "generated_at": "2026-05-27T03:31:42.438Z",
+  "generated_at": "2026-05-27T03:55:33.784Z",
   "generator": "scripts/build-indexes.js",
   "source_count": 54,
   "source_hashes": {
-    "manifest.json": "df4577c459275b430967fea4452b04a9e454de7c3e1c7f439bc433a3e37205d9",
-    "data/atlas-ttps.json": "ff259e70fe63147914f3f8c9a34a15ed228c46074885541a4d891d74c0a4bebf",
-    "data/attack-techniques.json": "4b3055b1f50c8a40cd81695d4169f669b3908006525d9201134770fa54f103cf",
-    "data/cve-catalog.json": "995160b2f5b40b95c2dba2553b87f1415add8706f3db45070dcbb7e1694ff4c9",
-    "data/cwe-catalog.json": "3e67b9bdfb31df7a0a46b89b3ac4972ba7b7b5e10004a8233b4fe2267022c736",
+    "manifest.json": "82003c5f5458a9f3646595e97348761c10578807c0f617a35cc994fe1d5ffe85",
+    "data/atlas-ttps.json": "2f0c5d58308248a1dcf43ede2469d507d3249acb8f93f04512b5c9b19697a62b",
+    "data/attack-techniques.json": "ec4132359d50c045e4b4e2218608db33324ef41f85aeb40bf61de13cf0168af7",
+    "data/cve-catalog.json": "ff07d91bc04ba45045caa9e3d96fdd7789fe1ab6af8858dfc4387266bb202ef4",
+    "data/cwe-catalog.json": "ea554587b7486e8dba49461528ef5e0445647b14e4358929f327bcef6ad5d987",
     "data/d3fend-catalog.json": "9a54bccb9f24f84b32024216cc3f53819a053721ac8ab43c326859e68fc0ffaf",
     "data/dlp-controls.json": "d2406c482dddd30e49203879999dc4b3a7fd4d0494d6a61d86b91ee76415df19",
     "data/exploit-availability.json": "ec2656f0d9a893610e27b43eb6035fe9b18e057c9f6dfaac7e7d4959bbcbb795",
-    "data/framework-control-gaps.json": "26961494168c99ecae72afe854b3f1d30774a37b6a31396640ca51050ae25ea8",
+    "data/framework-control-gaps.json": "721956b0c705fe75363ad5bc0227d70f82baf75619fe8f535850ee189e5230f3",
     "data/global-frameworks.json": "9ba563a85f7f8d6c3c957de64945e20925a89d0ed6ea6fc561cf093811acf558",
     "data/rfc-references.json": "66ef2e1f444a2cf0c2700a754f0a66030bb8a91d9e68394b9537ea1fe8b904fe",
-    "data/zeroday-lessons.json": "8ed90a6d21ac18940c43b64ea2a46e0006948533e59ebdfc868048679d1c4a2e",
+    "data/zeroday-lessons.json": "0dc49ed26af542bf74e9662095b00e9bd6de5aa7ffe497809a245f54abb1eabf",
     "skills/kernel-lpe-triage/skill.md": "08b3e9815ba481c57c80f5fc0ccbf5bb7cbb41f570c235ba6ff9596b8c07354d",
     "skills/ai-attack-surface/skill.md": "c4c1eb22a38ca7a959b5725222bab8fbd4f4044a548a93f3e288e6f698334b72",
     "skills/mcp-agent-trust/skill.md": "89ac89084391d2341b6513fefb1be2d36b93de1c130f057696219c1c59440f13",
@@ -72,7 +72,7 @@
       "dlp_refs": 0
     },
     "trigger_table_entries": 538,
-    "chains_cve_entries": 405,
+    "chains_cve_entries": 406,
     "chains_cwe_entries": 172,
     "jurisdictions_indexed": 29,
     "handoff_dag_nodes": 42,

package/data/_indexes/activity-feed.json

@@ -149,7 +149,7 @@
       "artifact": "data/cve-catalog.json",
       "path": "data/cve-catalog.json",
       "schema_version": "1.0.0",
-      "entry_count": 416
+      "entry_count": 417
     },
     {
       "date": "2026-05-18",
@@ -165,7 +165,7 @@
       "artifact": "data/zeroday-lessons.json",
       "path": "data/zeroday-lessons.json",
       "schema_version": "1.1.0",
-      "entry_count": 411
+      "entry_count": 412
     },
     {
       "date": "2026-05-17",

package/data/_indexes/catalog-summaries.json

@@ -62,7 +62,7 @@
         "rebuild_after_days": 365,
         "note": "Per-entry last_verified governs decay. Skills depending on this catalog must check entry freshness before high-stakes use."
       },
-      "entry_count": 416,
+      "entry_count": 417,
       "sample_keys": [
         "CVE-2025-53773",
         "CVE-2026-30615",
@@ -238,7 +238,7 @@
         "rebuild_after_days": 365,
         "note": "Per-entry last_verified governs decay. Skills depending on this catalog must check entry freshness before high-stakes use."
       },
-      "entry_count": 411,
+      "entry_count": 412,
       "sample_keys": [
         "CVE-2026-31431",
         "CVE-2025-53773",

package/data/_indexes/chains.json

@@ -75920,6 +75920,314 @@
       ]
     }
   },
+  "CVE-2024-31462": {
+    "name": "stable-diffusion-webui Backup/Restore Limited File Write (Path Traversal)",
+    "rwep": 17,
+    "cvss": 6.3,
+    "cisa_kev": false,
+    "epss_score": 0.00245,
+    "referencing_skills": [
+      "ai-attack-surface",
+      "compliance-theater",
+      "rag-pipeline-security",
+      "threat-modeling-methodology",
+      "webapp-security",
+      "api-security",
+      "container-runtime-security"
+    ],
+    "chain": {
+      "cwes": [
+        {
+          "id": "CWE-1039",
+          "name": "Automated Recognition Mechanism with Inadequate Detection or Handling of Adversarial Input Perturbations",
+          "category": "AI/ML"
+        },
+        {
+          "id": "CWE-1188",
+          "name": "Initialization of a Resource with an Insecure Default",
+          "category": "Configuration"
+        },
+        {
+          "id": "CWE-1395",
+          "name": "Dependency on Vulnerable Third-Party Component",
+          "category": "Supply Chain"
+        },
+        {
+          "id": "CWE-1426",
+          "name": "Improper Validation of Generative AI Output",
+          "category": "AI/ML"
+        },
+        {
+          "id": "CWE-200",
+          "name": "Exposure of Sensitive Information to an Unauthorized Actor",
+          "category": "Information Exposure"
+        },
+        {
+          "id": "CWE-22",
+          "name": "Improper Limitation of a Pathname to a Restricted Directory (Path Traversal)",
+          "category": "Path/Resource"
+        },
+        {
+          "id": "CWE-269",
+          "name": "Improper Privilege Management",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-287",
+          "name": "Improper Authentication",
+          "category": "Authentication"
+        },
+        {
+          "id": "CWE-352",
+          "name": "Cross-Site Request Forgery (CSRF)",
+          "category": "Session"
+        },
+        {
+          "id": "CWE-434",
+          "name": "Unrestricted Upload of File with Dangerous Type",
+          "category": "File Handling"
+        },
+        {
+          "id": "CWE-502",
+          "name": "Deserialization of Untrusted Data",
+          "category": "Serialization"
+        },
+        {
+          "id": "CWE-732",
+          "name": "Incorrect Permission Assignment for Critical Resource",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-77",
+          "name": "Improper Neutralization of Special Elements used in a Command (Command Injection)",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-78",
+          "name": "Improper Neutralization of Special Elements used in an OS Command (OS Command Injection)",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-787",
+          "name": "Out-of-bounds Write",
+          "category": "Memory Safety"
+        },
+        {
+          "id": "CWE-79",
+          "name": "Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-862",
+          "name": "Missing Authorization",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-863",
+          "name": "Incorrect Authorization",
+          "category": "Authorization"
+        },
+        {
+          "id": "CWE-89",
+          "name": "Improper Neutralization of Special Elements used in an SQL Command (SQL Injection)",
+          "category": "Injection"
+        },
+        {
+          "id": "CWE-918",
+          "name": "Server-Side Request Forgery (SSRF)",
+          "category": "Network"
+        },
+        {
+          "id": "CWE-94",
+          "name": "Improper Control of Generation of Code (Code Injection)",
+          "category": "Injection"
+        }
+      ],
+      "atlas": [
+        {
+          "id": "AML.T0010",
+          "name": "ML Supply Chain Compromise",
+          "tactic": "Initial Access"
+        },
+        {
+          "id": "AML.T0016",
+          "name": "Obtain Capabilities: Develop Capabilities",
+          "tactic": "Resource Development"
+        },
+        {
+          "id": "AML.T0017",
+          "name": "Discover ML Model Ontology",
+          "tactic": "Discovery"
+        },
+        {
+          "id": "AML.T0018",
+          "name": "Backdoor ML Model",
+          "tactic": "Persistence"
+        },
+        {
+          "id": "AML.T0020",
+          "name": "Poison Training Data",
+          "tactic": "ML Attack Staging"
+        },
+        {
+          "id": "AML.T0043",
+          "name": "Craft Adversarial Data",
+          "tactic": "ML Attack Staging"
+        },
+        {
+          "id": "AML.T0051",
+          "name": "LLM Prompt Injection",
+          "tactic": "Execution"
+        },
+        {
+          "id": "AML.T0054",
+          "name": "LLM Jailbreak",
+          "tactic": "Defense Evasion"
+        },
+        {
+          "id": "AML.T0096",
+          "name": "AI API as Covert C2 Channel",
+          "tactic": "Command and Control"
+        }
+      ],
+      "d3fend": [
+        {
+          "id": "D3-CSPP",
+          "name": "Client-server Payload Profiling",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-IOPR",
+          "name": "Input/Output Profiling Resource",
+          "tactic": "Detect"
+        },
+        {
+          "id": "D3-NTA",
+          "name": "Network Traffic Analysis",
+          "tactic": "Detect"
+        }
+      ],
+      "framework_gaps": [
+        {
+          "id": "ALL-AI-PIPELINE-INTEGRITY",
+          "framework": "ALL",
+          "control_name": "AI Pipeline Integrity"
+        },
+        {
+          "id": "ALL-PROMPT-INJECTION-ACCESS-CONTROL",
+          "framework": "ALL",
+          "control_name": "Prompt Injection as Access Control Failure"
+        },
+        {
+          "id": "CMMC-2.0-Level-2",
+          "framework": "CMMC 2.0 (Cybersecurity Maturity Model Certification) Level 2",
+          "control_name": "Level 2 — Advanced (110 NIST 800-171 Rev 2 controls)"
+        },
+        {
+          "id": "FedRAMP-Rev5-Moderate",
+          "framework": "FedRAMP Rev 5 Moderate",
+          "control_name": "FedRAMP Moderate baseline (NIST 800-53 Rev 5 tailoring)"
+        },
+        {
+          "id": "ISO-27001-2022-A.8.28",
+          "framework": "ISO/IEC 27001:2022",
+          "control_name": "Secure coding"
+        },
+        {
+          "id": "ISO-IEC-23894-2023-clause-7",
+          "framework": "ISO/IEC 23894:2023 (AI Risk Management Guidance)",
+          "control_name": "AI risk management process"
+        },
+        {
+          "id": "ISO-IEC-42001-2023-clause-6.1.2",
+          "framework": "ISO/IEC 42001:2023 (AI Management System)",
+          "control_name": "AI risk assessment"
+        },
+        {
+          "id": "NIST-800-218-SSDF",
+          "framework": "NIST SP 800-218 (Secure Software Development Framework v1.1)",
+          "control_name": "Secure Software Development Framework"
+        },
+        {
+          "id": "NIST-800-53-AC-2",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Account Management"
+        },
+        {
+          "id": "NIST-800-53-CM-7",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Least Functionality"
+        },
+        {
+          "id": "NIST-800-53-SI-12",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Information Management and Retention"
+        },
+        {
+          "id": "NIST-800-53-SI-3",
+          "framework": "NIST SP 800-53 Rev 5",
+          "control_name": "Malicious Code Protection"
+        },
+        {
+          "id": "NIST-AI-RMF-MEASURE-2.5",
+          "framework": "NIST AI RMF 1.0",
+          "control_name": "AI system to human interaction evaluation"
+        },
+        {
+          "id": "OWASP-ASVS-v5.0-V14",
+          "framework": "OWASP ASVS v5.0",
+          "control_name": "Configuration verification"
+        },
+        {
+          "id": "OWASP-LLM-Top-10-2025-LLM01",
+          "framework": "OWASP Top 10 for LLM Applications 2025",
+          "control_name": "Prompt Injection"
+        },
+        {
+          "id": "OWASP-LLM-Top-10-2025-LLM02",
+          "framework": "OWASP Top 10 for LLM Applications 2025",
+          "control_name": "Sensitive Information Disclosure"
+        },
+        {
+          "id": "OWASP-LLM-Top-10-2025-LLM08",
+          "framework": "OWASP Top 10 for LLM Applications 2025",
+          "control_name": "Vector and Embedding Weaknesses"
+        },
+        {
+          "id": "SLSA-v1.0-Build-L3",
+          "framework": "SLSA v1.0 (Supply-chain Levels for Software Artifacts) — Build Track",
+          "control_name": "Hardened build platform with non-falsifiable provenance"
+        },
+        {
+          "id": "SOC2-CC6-logical-access",
+          "framework": "SOC 2 (AICPA Trust Services Criteria)",
+          "control_name": "Logical and Physical Access Controls"
+        }
+      ],
+      "attack_refs": [
+        "T1059",
+        "T1068",
+        "T1078",
+        "T1190",
+        "T1505",
+        "T1565",
+        "T1566",
+        "T1567",
+        "T1610",
+        "T1611"
+      ],
+      "rfc_refs": [
+        "RFC-6749",
+        "RFC-7519",
+        "RFC-8032",
+        "RFC-8446",
+        "RFC-8725",
+        "RFC-9114",
+        "RFC-9421",
+        "RFC-9700"
+      ]
+    }
+  },
   "CWE-20": {
     "name": "Improper Input Validation",
     "category": "Validation",
@@ -76212,6 +76520,7 @@
       "CVE-2024-27132",
       "CVE-2024-2912",
       "CVE-2024-3094",
+      "CVE-2024-31462",
       "CVE-2024-3154",
       "CVE-2024-37032",
       "CVE-2024-37052",
@@ -76479,6 +76788,7 @@
       "CVE-2024-24591",
       "CVE-2024-2912",
       "CVE-2024-3094",
+      "CVE-2024-31462",
       "CVE-2024-3154",
       "CVE-2024-37052",
       "CVE-2024-37060",
@@ -76663,6 +76973,7 @@
       "CVE-2024-24591",
       "CVE-2024-27132",
       "CVE-2024-2912",
+      "CVE-2024-31462",
       "CVE-2024-37032",
       "CVE-2024-37052",
       "CVE-2024-37060",
@@ -76884,6 +77195,7 @@
       "CVE-2024-24591",
       "CVE-2024-27132",
       "CVE-2024-2912",
+      "CVE-2024-31462",
       "CVE-2024-37032",
       "CVE-2024-37052",
       "CVE-2024-37060",
@@ -77119,6 +77431,7 @@
       "CVE-2024-24591",
       "CVE-2024-27132",
       "CVE-2024-2912",
+      "CVE-2024-31462",
       "CVE-2024-37032",
       "CVE-2024-37052",
       "CVE-2024-37060",
@@ -77465,6 +77778,7 @@
       "CVE-2024-27132",
       "CVE-2024-2912",
       "CVE-2024-3094",
+      "CVE-2024-31462",
       "CVE-2024-3154",
       "CVE-2024-37032",
       "CVE-2024-37052",
@@ -78257,6 +78571,7 @@
       "CVE-2024-24591",
       "CVE-2024-2912",
       "CVE-2024-3094",
+      "CVE-2024-31462",
       "CVE-2024-3154",
       "CVE-2024-37052",
       "CVE-2024-37060",
@@ -78664,6 +78979,7 @@
       "CVE-2024-27132",
       "CVE-2024-2912",
       "CVE-2024-3094",
+      "CVE-2024-31462",
       "CVE-2024-3154",
       "CVE-2024-37032",
       "CVE-2024-37052",
@@ -79324,6 +79640,7 @@
       "CVE-2024-27132",
       "CVE-2024-2912",
       "CVE-2024-3094",
+      "CVE-2024-31462",
       "CVE-2024-3154",
       "CVE-2024-37032",
       "CVE-2024-37052",
@@ -80340,6 +80657,7 @@
       "CVE-2024-27132",
       "CVE-2024-2912",
       "CVE-2024-3094",
+      "CVE-2024-31462",
       "CVE-2024-3154",
       "CVE-2024-37032",
       "CVE-2024-37052",
@@ -81599,6 +81917,7 @@
       "CVE-2024-27132",
       "CVE-2024-2912",
       "CVE-2024-3094",
+      "CVE-2024-31462",
       "CVE-2024-3154",
       "CVE-2024-37032",
       "CVE-2024-37052",
@@ -82082,6 +82401,7 @@
       "CVE-2024-24591",
       "CVE-2024-2912",
       "CVE-2024-3094",
+      "CVE-2024-31462",
       "CVE-2024-37052",
       "CVE-2024-37060",
       "CVE-2024-5565",
@@ -83045,6 +83365,7 @@
       "CVE-2024-27132",
       "CVE-2024-2912",
       "CVE-2024-3094",
+      "CVE-2024-31462",
       "CVE-2024-3154",
       "CVE-2024-37032",
       "CVE-2024-37052",
@@ -83432,6 +83753,7 @@
       "CVE-2024-27443",
       "CVE-2024-2912",
       "CVE-2024-3094",
+      "CVE-2024-31462",
       "CVE-2024-3154",
       "CVE-2024-37032",
       "CVE-2024-37052",
@@ -84391,6 +84713,7 @@
       "CVE-2024-24591",
       "CVE-2024-2912",
       "CVE-2024-3094",
+      "CVE-2024-31462",
       "CVE-2024-3154",
       "CVE-2024-37052",
       "CVE-2024-37060",
@@ -84697,6 +85020,7 @@
       "CVE-2024-24591",
       "CVE-2024-2912",
       "CVE-2024-3094",
+      "CVE-2024-31462",
       "CVE-2024-37052",
       "CVE-2024-37060",
       "CVE-2024-5565",
@@ -85048,6 +85372,7 @@
       "CVE-2024-27132",
       "CVE-2024-2912",
       "CVE-2024-3094",
+      "CVE-2024-31462",
       "CVE-2024-3154",
       "CVE-2024-37032",
       "CVE-2024-37052",
@@ -85419,6 +85744,7 @@
       "CVE-2024-24591",
       "CVE-2024-27132",
       "CVE-2024-2912",
+      "CVE-2024-31462",
       "CVE-2024-37032",
       "CVE-2024-37052",
       "CVE-2024-37060",
@@ -85655,6 +85981,7 @@
       "CVE-2024-24591",
       "CVE-2024-2912",
       "CVE-2024-3094",
+      "CVE-2024-31462",
       "CVE-2024-3154",
       "CVE-2024-37052",
       "CVE-2024-37060",
@@ -86406,6 +86733,7 @@
       "CVE-2024-27132",
       "CVE-2024-2912",
       "CVE-2024-3094",
+      "CVE-2024-31462",
       "CVE-2024-3154",
       "CVE-2024-37032",
       "CVE-2024-37052",
@@ -86764,6 +87092,7 @@
       "CVE-2024-27132",
       "CVE-2024-2912",
       "CVE-2024-3094",
+      "CVE-2024-31462",
       "CVE-2024-37032",
       "CVE-2024-37052",
       "CVE-2024-37060",

package/data/atlas-ttps.json

@@ -1792,7 +1792,8 @@
       "CVE-2026-41950",
       "CVE-2026-45829",
       "CVE-2026-21858",
-      "CVE-2025-68668"
+      "CVE-2025-68668",
+      "CVE-2024-31462"
     ]
   },
   "AML.T0050": {

package/data/attack-techniques.json

@@ -1112,7 +1112,8 @@
       "CVE-2026-22219",
       "CVE-2026-5760",
       "CVE-2026-21858",
-      "CVE-2025-68668"
+      "CVE-2025-68668",
+      "CVE-2024-31462"
     ],
     "description_full": "Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network. The weakness in the system can be a software bug, a temporary glitch, or a misconfiguration. Exploited applications are often websites/web servers, but can also include databases (like SQL), standard services (like SMB or SSH), network device administration and management protocols (like SNMP and Smart Install), and any other system with Internet-accessible open sockets.(Citation: NVD CVE-2016-6662)(Citation: CIS Multiple SMB Vulnerabilities)(Citation: US-CERT TA18-106A Network Infrastructure Devices 2018)(Citation: Cisco Blog Legacy Device Attacks)(Citation: NVD CVE-2014-7169) On ESXi infrastructure, adversaries may exploit exposed OpenSLP services; they may alternatively exploit exposed VMware vCenter servers.(Citation: Recorded Future ESXiArgs Ransomware 2023)(Citation: Ars Technica VMWare Code Execution Vulnerability 2021) Depending on the flaw being exploited, this may also involve [Exploitation for Stealth](https://attack.mitre.org/techniques/T1211) or [Exploitation for Client Execution](https://attack.mitre.org/techniques/T1203). If an application is hosted on cloud-based infrastructure and/or is containerized, then exploiting it may lead to compromise of the underlying instance or container. This can allow an adversary a path to access the cloud or container APIs (e.g., via the [Cloud Instance Metadata API](https://attack.mitre.org/techniques/T1552/005)), exploit container host access via [Escape to Host](https://attack.mitre.org/techniques/T1611), or take advantage of weak identity and access management policies. Adversaries may also exploit edge network infrastructure and related appliances, specifically targeting devices that do not support robust host-based defenses.(Citation: Mandiant Fortinet Zero Day)(Citation: Wired Russia Cyberwar) For websites and databases, the OWASP top 10 and CWE top 25 highlight the most common web-based vulnerabilities.(Citation: OWASP Top 10)(Citation: CWE top 25)",
     "platforms": [