@blamejs/exceptd-skills 0.18.18 → 0.18.20
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/ARCHITECTURE.md +1 -1
- package/CHANGELOG.md +10 -0
- package/data/_indexes/_meta.json +9 -9
- package/data/_indexes/activity-feed.json +3 -3
- package/data/_indexes/catalog-summaries.json +3 -3
- package/data/_indexes/chains.json +11092 -0
- package/data/_indexes/frequency.json +5 -0
- package/data/attack-techniques.json +58 -4
- package/data/cve-catalog.json +2145 -2
- package/data/cwe-catalog.json +156 -1
- package/data/framework-control-gaps.json +106 -0
- package/data/zeroday-lessons.json +1101 -1
- package/manifest.json +53 -53
- package/package.json +2 -2
- package/sbom.cdx.json +27 -27
- package/scripts/check-agents-md-collectors.js +85 -25
|
@@ -3188,6 +3188,7 @@
|
|
|
3188
3188
|
"CWE-305",
|
|
3189
3189
|
"CWE-310",
|
|
3190
3190
|
"CWE-312",
|
|
3191
|
+
"CWE-321",
|
|
3191
3192
|
"CWE-324",
|
|
3192
3193
|
"CWE-326",
|
|
3193
3194
|
"CWE-328",
|
|
@@ -3200,6 +3201,7 @@
|
|
|
3200
3201
|
"CWE-340",
|
|
3201
3202
|
"CWE-346",
|
|
3202
3203
|
"CWE-35",
|
|
3204
|
+
"CWE-36",
|
|
3203
3205
|
"CWE-367",
|
|
3204
3206
|
"CWE-377",
|
|
3205
3207
|
"CWE-384",
|
|
@@ -3211,6 +3213,7 @@
|
|
|
3211
3213
|
"CWE-427",
|
|
3212
3214
|
"CWE-428",
|
|
3213
3215
|
"CWE-436",
|
|
3216
|
+
"CWE-44",
|
|
3214
3217
|
"CWE-444",
|
|
3215
3218
|
"CWE-451",
|
|
3216
3219
|
"CWE-470",
|
|
@@ -3238,11 +3241,13 @@
|
|
|
3238
3241
|
"CWE-642",
|
|
3239
3242
|
"CWE-643",
|
|
3240
3243
|
"CWE-648",
|
|
3244
|
+
"CWE-653",
|
|
3241
3245
|
"CWE-667",
|
|
3242
3246
|
"CWE-669",
|
|
3243
3247
|
"CWE-680",
|
|
3244
3248
|
"CWE-693",
|
|
3245
3249
|
"CWE-697",
|
|
3250
|
+
"CWE-706",
|
|
3246
3251
|
"CWE-73",
|
|
3247
3252
|
"CWE-74",
|
|
3248
3253
|
"CWE-749",
|
|
@@ -278,8 +278,11 @@
|
|
|
278
278
|
"CVE-2014-6278",
|
|
279
279
|
"CVE-2016-10033",
|
|
280
280
|
"CVE-2017-1000353",
|
|
281
|
+
"CVE-2019-9874",
|
|
282
|
+
"CVE-2019-9875",
|
|
281
283
|
"CVE-2020-25078",
|
|
282
284
|
"CVE-2020-25079",
|
|
285
|
+
"CVE-2021-20035",
|
|
283
286
|
"CVE-2022-1471",
|
|
284
287
|
"CVE-2023-33538",
|
|
285
288
|
"CVE-2023-39780",
|
|
@@ -318,18 +321,22 @@
|
|
|
318
321
|
"CVE-2025-1094",
|
|
319
322
|
"CVE-2025-11837",
|
|
320
323
|
"CVE-2025-11953",
|
|
324
|
+
"CVE-2025-1316",
|
|
321
325
|
"CVE-2025-1550",
|
|
322
326
|
"CVE-2025-1753",
|
|
323
327
|
"CVE-2025-1976",
|
|
324
328
|
"CVE-2025-20281",
|
|
325
329
|
"CVE-2025-20337",
|
|
330
|
+
"CVE-2025-21590",
|
|
326
331
|
"CVE-2025-23254",
|
|
327
332
|
"CVE-2025-24016",
|
|
333
|
+
"CVE-2025-24813",
|
|
328
334
|
"CVE-2025-24893",
|
|
329
335
|
"CVE-2025-26399",
|
|
330
336
|
"CVE-2025-27520",
|
|
331
337
|
"CVE-2025-29635",
|
|
332
338
|
"CVE-2025-30165",
|
|
339
|
+
"CVE-2025-30406",
|
|
333
340
|
"CVE-2025-32432",
|
|
334
341
|
"CVE-2025-32433",
|
|
335
342
|
"CVE-2025-32434",
|
|
@@ -544,6 +551,7 @@
|
|
|
544
551
|
"CVE-2023-41974",
|
|
545
552
|
"CVE-2023-43000",
|
|
546
553
|
"CVE-2024-0769",
|
|
554
|
+
"CVE-2024-53197",
|
|
547
555
|
"CVE-2024-8068",
|
|
548
556
|
"CVE-2025-10725",
|
|
549
557
|
"CVE-2025-1976",
|
|
@@ -552,8 +560,10 @@
|
|
|
552
560
|
"CVE-2025-22224",
|
|
553
561
|
"CVE-2025-22225",
|
|
554
562
|
"CVE-2025-24201",
|
|
563
|
+
"CVE-2025-24983",
|
|
555
564
|
"CVE-2025-24990",
|
|
556
565
|
"CVE-2025-27038",
|
|
566
|
+
"CVE-2025-29824",
|
|
557
567
|
"CVE-2025-30400",
|
|
558
568
|
"CVE-2025-31277",
|
|
559
569
|
"CVE-2025-32463",
|
|
@@ -641,6 +651,7 @@
|
|
|
641
651
|
"CVE-2019-6693",
|
|
642
652
|
"CVE-2020-10148",
|
|
643
653
|
"CVE-2020-24363",
|
|
654
|
+
"CVE-2021-20035",
|
|
644
655
|
"CVE-2021-32030",
|
|
645
656
|
"CVE-2023-27351",
|
|
646
657
|
"CVE-2023-43791",
|
|
@@ -648,12 +659,15 @@
|
|
|
648
659
|
"CVE-2023-52163",
|
|
649
660
|
"CVE-2024-12776",
|
|
650
661
|
"CVE-2024-1709",
|
|
662
|
+
"CVE-2024-20439",
|
|
651
663
|
"CVE-2024-27199",
|
|
652
664
|
"CVE-2024-54085",
|
|
653
665
|
"CVE-2024-57726",
|
|
654
666
|
"CVE-2025-12480",
|
|
655
667
|
"CVE-2025-1796",
|
|
656
668
|
"CVE-2025-21085",
|
|
669
|
+
"CVE-2025-21590",
|
|
670
|
+
"CVE-2025-24472",
|
|
657
671
|
"CVE-2025-2746",
|
|
658
672
|
"CVE-2025-2747",
|
|
659
673
|
"CVE-2025-31161",
|
|
@@ -1009,17 +1023,21 @@
|
|
|
1009
1023
|
"CVE-2016-10033",
|
|
1010
1024
|
"CVE-2016-7836",
|
|
1011
1025
|
"CVE-2017-1000353",
|
|
1026
|
+
"CVE-2017-12637",
|
|
1012
1027
|
"CVE-2017-7921",
|
|
1013
1028
|
"CVE-2018-4063",
|
|
1014
1029
|
"CVE-2019-19006",
|
|
1015
1030
|
"CVE-2019-5418",
|
|
1016
1031
|
"CVE-2019-6693",
|
|
1017
1032
|
"CVE-2019-9621",
|
|
1033
|
+
"CVE-2019-9874",
|
|
1034
|
+
"CVE-2019-9875",
|
|
1018
1035
|
"CVE-2020-10148",
|
|
1019
1036
|
"CVE-2020-24363",
|
|
1020
1037
|
"CVE-2020-25078",
|
|
1021
1038
|
"CVE-2020-25079",
|
|
1022
1039
|
"CVE-2020-7796",
|
|
1040
|
+
"CVE-2021-20035",
|
|
1023
1041
|
"CVE-2021-21311",
|
|
1024
1042
|
"CVE-2021-22054",
|
|
1025
1043
|
"CVE-2021-22175",
|
|
@@ -1066,6 +1084,7 @@
|
|
|
1066
1084
|
"CVE-2024-1561",
|
|
1067
1085
|
"CVE-2024-1708",
|
|
1068
1086
|
"CVE-2024-1709",
|
|
1087
|
+
"CVE-2024-20439",
|
|
1069
1088
|
"CVE-2024-21182",
|
|
1070
1089
|
"CVE-2024-21575",
|
|
1071
1090
|
"CVE-2024-21576",
|
|
@@ -1082,6 +1101,7 @@
|
|
|
1082
1101
|
"CVE-2024-42478",
|
|
1083
1102
|
"CVE-2024-42479",
|
|
1084
1103
|
"CVE-2024-43468",
|
|
1104
|
+
"CVE-2024-48248",
|
|
1085
1105
|
"CVE-2024-4889",
|
|
1086
1106
|
"CVE-2024-50050",
|
|
1087
1107
|
"CVE-2024-54085",
|
|
@@ -1102,6 +1122,7 @@
|
|
|
1102
1122
|
"CVE-2025-11953",
|
|
1103
1123
|
"CVE-2025-12480",
|
|
1104
1124
|
"CVE-2025-12686",
|
|
1125
|
+
"CVE-2025-1316",
|
|
1105
1126
|
"CVE-2025-14611",
|
|
1106
1127
|
"CVE-2025-14733",
|
|
1107
1128
|
"CVE-2025-14847",
|
|
@@ -1114,6 +1135,8 @@
|
|
|
1114
1135
|
"CVE-2025-20393",
|
|
1115
1136
|
"CVE-2025-22457",
|
|
1116
1137
|
"CVE-2025-24016",
|
|
1138
|
+
"CVE-2025-24472",
|
|
1139
|
+
"CVE-2025-24813",
|
|
1117
1140
|
"CVE-2025-24893",
|
|
1118
1141
|
"CVE-2025-25257",
|
|
1119
1142
|
"CVE-2025-25297",
|
|
@@ -1129,6 +1152,7 @@
|
|
|
1129
1152
|
"CVE-2025-29635",
|
|
1130
1153
|
"CVE-2025-30165",
|
|
1131
1154
|
"CVE-2025-30202",
|
|
1155
|
+
"CVE-2025-30406",
|
|
1132
1156
|
"CVE-2025-31125",
|
|
1133
1157
|
"CVE-2025-31161",
|
|
1134
1158
|
"CVE-2025-31324",
|
|
@@ -1465,13 +1489,18 @@
|
|
|
1465
1489
|
"CVE-2022-48503",
|
|
1466
1490
|
"CVE-2023-41974",
|
|
1467
1491
|
"CVE-2023-43000",
|
|
1492
|
+
"CVE-2024-53150",
|
|
1468
1493
|
"CVE-2025-10585",
|
|
1469
1494
|
"CVE-2025-13223",
|
|
1470
1495
|
"CVE-2025-14174",
|
|
1471
1496
|
"CVE-2025-21042",
|
|
1472
1497
|
"CVE-2025-21043",
|
|
1473
1498
|
"CVE-2025-24201",
|
|
1499
|
+
"CVE-2025-24983",
|
|
1500
|
+
"CVE-2025-24985",
|
|
1501
|
+
"CVE-2025-24993",
|
|
1474
1502
|
"CVE-2025-27363",
|
|
1503
|
+
"CVE-2025-2783",
|
|
1475
1504
|
"CVE-2025-30397",
|
|
1476
1505
|
"CVE-2025-30400",
|
|
1477
1506
|
"CVE-2025-31200",
|
|
@@ -1522,6 +1551,7 @@
|
|
|
1522
1551
|
"cve_refs": [
|
|
1523
1552
|
"CVE-2023-43791",
|
|
1524
1553
|
"CVE-2024-21182",
|
|
1554
|
+
"CVE-2024-53197",
|
|
1525
1555
|
"CVE-2025-14174",
|
|
1526
1556
|
"CVE-2025-1796",
|
|
1527
1557
|
"CVE-2025-69286"
|
|
@@ -1615,7 +1645,10 @@
|
|
|
1615
1645
|
"stix_id": "attack-pattern--b80d107d-fa0d-4b60-9684-b0433e8bdba0",
|
|
1616
1646
|
"is_subtechnique": false,
|
|
1617
1647
|
"last_verified": "2026-05-19",
|
|
1618
|
-
"description": "Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources."
|
|
1648
|
+
"description": "Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.",
|
|
1649
|
+
"cve_refs": [
|
|
1650
|
+
"CVE-2025-29824"
|
|
1651
|
+
]
|
|
1619
1652
|
},
|
|
1620
1653
|
"T1505": {
|
|
1621
1654
|
"name": "Server Software Component",
|
|
@@ -1877,6 +1910,7 @@
|
|
|
1877
1910
|
"name": "Unsecured Credentials: Credentials In Files",
|
|
1878
1911
|
"version": "v19",
|
|
1879
1912
|
"cve_refs": [
|
|
1913
|
+
"CVE-2024-48248",
|
|
1880
1914
|
"CVE-2024-6587",
|
|
1881
1915
|
"CVE-2025-21085",
|
|
1882
1916
|
"CVE-2026-30615",
|
|
@@ -2024,7 +2058,8 @@
|
|
|
2024
2058
|
"last_verified": "2026-05-19",
|
|
2025
2059
|
"description": "Adversaries may modify authentication mechanisms and processes to access user credentials or enable otherwise unwarranted access to accounts.",
|
|
2026
2060
|
"cve_refs": [
|
|
2027
|
-
"CVE-2024-12776"
|
|
2061
|
+
"CVE-2024-12776",
|
|
2062
|
+
"CVE-2025-24472"
|
|
2028
2063
|
]
|
|
2029
2064
|
},
|
|
2030
2065
|
"T1557": {
|
|
@@ -3145,6 +3180,7 @@
|
|
|
3145
3180
|
"cve_refs": [
|
|
3146
3181
|
"CVE-2023-50387",
|
|
3147
3182
|
"CVE-2023-50868",
|
|
3183
|
+
"CVE-2025-1316",
|
|
3148
3184
|
"CVE-2025-20352",
|
|
3149
3185
|
"CVE-2025-30202",
|
|
3150
3186
|
"CVE-2025-6543",
|
|
@@ -3205,7 +3241,10 @@
|
|
|
3205
3241
|
"Windows"
|
|
3206
3242
|
],
|
|
3207
3243
|
"stix_id": "attack-pattern--0a3ead4e-6d47-4ccb-854c-a6a4f9d96b22",
|
|
3208
|
-
"is_subtechnique": false
|
|
3244
|
+
"is_subtechnique": false,
|
|
3245
|
+
"cve_refs": [
|
|
3246
|
+
"CVE-2025-29824"
|
|
3247
|
+
]
|
|
3209
3248
|
},
|
|
3210
3249
|
"T1006": {
|
|
3211
3250
|
"id": "T1006",
|
|
@@ -3225,7 +3264,12 @@
|
|
|
3225
3264
|
"Windows"
|
|
3226
3265
|
],
|
|
3227
3266
|
"stix_id": "attack-pattern--0c8ab3eb-df48-4b9c-ace7-beacaac81cc5",
|
|
3228
|
-
"is_subtechnique": false
|
|
3267
|
+
"is_subtechnique": false,
|
|
3268
|
+
"cve_refs": [
|
|
3269
|
+
"CVE-2024-53150",
|
|
3270
|
+
"CVE-2025-24984",
|
|
3271
|
+
"CVE-2025-24991"
|
|
3272
|
+
]
|
|
3229
3273
|
},
|
|
3230
3274
|
"T1007": {
|
|
3231
3275
|
"id": "T1007",
|
|
@@ -3931,6 +3975,7 @@
|
|
|
3931
3975
|
"stix_id": "attack-pattern--7bc57495-ea59-4380-be31-a64af124ef18",
|
|
3932
3976
|
"is_subtechnique": false,
|
|
3933
3977
|
"cve_refs": [
|
|
3978
|
+
"CVE-2017-12637",
|
|
3934
3979
|
"CVE-2023-51449",
|
|
3935
3980
|
"CVE-2023-6021",
|
|
3936
3981
|
"CVE-2023-6038",
|
|
@@ -3938,6 +3983,8 @@
|
|
|
3938
3983
|
"CVE-2024-24591",
|
|
3939
3984
|
"CVE-2024-38475",
|
|
3940
3985
|
"CVE-2024-39722",
|
|
3986
|
+
"CVE-2024-48248",
|
|
3987
|
+
"CVE-2025-24984",
|
|
3941
3988
|
"CVE-2026-20262",
|
|
3942
3989
|
"CVE-2026-34909",
|
|
3943
3990
|
"CVE-2026-34926",
|
|
@@ -4799,6 +4846,8 @@
|
|
|
4799
4846
|
"stix_id": "attack-pattern--fe926152-f431-4baf-956c-4ad3cb0bf23b",
|
|
4800
4847
|
"is_subtechnique": false,
|
|
4801
4848
|
"cve_refs": [
|
|
4849
|
+
"CVE-2025-21590",
|
|
4850
|
+
"CVE-2025-2783",
|
|
4802
4851
|
"CVE-2025-31201",
|
|
4803
4852
|
"CVE-2026-21509",
|
|
4804
4853
|
"CVE-2026-21510",
|
|
@@ -10935,6 +10984,9 @@
|
|
|
10935
10984
|
"_auto_imported": true,
|
|
10936
10985
|
"_intake_method": "mitre-attack-stix",
|
|
10937
10986
|
"cve_refs": [
|
|
10987
|
+
"CVE-2025-24985",
|
|
10988
|
+
"CVE-2025-24991",
|
|
10989
|
+
"CVE-2025-24993",
|
|
10938
10990
|
"CVE-2025-31200",
|
|
10939
10991
|
"CVE-2025-33053",
|
|
10940
10992
|
"CVE-2025-48384"
|
|
@@ -12319,7 +12371,9 @@
|
|
|
12319
12371
|
"CVE-2024-1708",
|
|
12320
12372
|
"CVE-2024-7399",
|
|
12321
12373
|
"CVE-2024-7694",
|
|
12374
|
+
"CVE-2025-24813",
|
|
12322
12375
|
"CVE-2025-2749",
|
|
12376
|
+
"CVE-2025-30406",
|
|
12323
12377
|
"CVE-2025-31324",
|
|
12324
12378
|
"CVE-2025-34028",
|
|
12325
12379
|
"CVE-2025-3928",
|