@blamejs/exceptd-skills 0.18.23 → 0.18.24

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (15) hide show
  1. package/CHANGELOG.md +4 -0
  2. package/README.md +1 -1
  3. package/data/_indexes/_meta.json +10 -10
  4. package/data/_indexes/activity-feed.json +3 -3
  5. package/data/_indexes/catalog-summaries.json +8 -8
  6. package/data/_indexes/chains.json +68546 -219
  7. package/data/_indexes/frequency.json +5 -0
  8. package/data/attack-techniques.json +184 -0
  9. package/data/cve-catalog.json +9475 -3
  10. package/data/cwe-catalog.json +239 -0
  11. package/data/framework-control-gaps.json +587 -0
  12. package/data/zeroday-lessons.json +5846 -1
  13. package/manifest.json +53 -53
  14. package/package.json +2 -2
  15. package/sbom.cdx.json +25 -25
package/data/_indexes/frequency.json CHANGED
@@ -3196,6 +3196,7 @@
3196
3196
  "CWE-282",
3197
3197
  "CWE-285",
3198
3198
  "CWE-288",
3199
+ "CWE-295",
3199
3200
  "CWE-303",
3200
3201
  "CWE-305",
3201
3202
  "CWE-310",
@@ -3213,6 +3214,7 @@
3213
3214
  "CWE-340",
3214
3215
  "CWE-346",
3215
3216
  "CWE-35",
3217
+ "CWE-351",
3216
3218
  "CWE-358",
3217
3219
  "CWE-36",
3218
3220
  "CWE-367",
@@ -3234,6 +3236,7 @@
3234
3236
  "CWE-451",
3235
3237
  "CWE-470",
3236
3238
  "CWE-472",
3239
+ "CWE-473",
3237
3240
  "CWE-476",
3238
3241
  "CWE-501",
3239
3242
  "CWE-506",
@@ -3268,6 +3271,7 @@
3268
3271
  "CWE-680",
3269
3272
  "CWE-693",
3270
3273
  "CWE-697",
3274
+ "CWE-703",
3271
3275
  "CWE-706",
3272
3276
  "CWE-707",
3273
3277
  "CWE-73",
@@ -3282,6 +3286,7 @@
3282
3286
  "CWE-783",
3283
3287
  "CWE-80",
3284
3288
  "CWE-822",
3289
+ "CWE-823",
3285
3290
  "CWE-835",
3286
3291
  "CWE-843",
3287
3292
  "CWE-88",
package/data/attack-techniques.json CHANGED
@@ -162,6 +162,9 @@
162
162
  "DS0009"
163
163
  ],
164
164
  "cve_refs": [
165
+ "CVE-2023-21237",
166
+ "CVE-2023-36584",
167
+ "CVE-2024-21412",
165
168
  "CVE-2024-43461",
166
169
  "CVE-2024-43572",
167
170
  "CVE-2026-32202"
@@ -282,12 +285,17 @@
282
285
  "CVE-2008-4128",
283
286
  "CVE-2014-3931",
284
287
  "CVE-2014-6278",
288
+ "CVE-2014-8361",
285
289
  "CVE-2016-10033",
290
+ "CVE-2016-20017",
286
291
  "CVE-2016-3714",
287
292
  "CVE-2017-1000353",
288
293
  "CVE-2017-3066",
289
294
  "CVE-2017-3506",
295
+ "CVE-2017-6884",
296
+ "CVE-2018-14667",
290
297
  "CVE-2018-14933",
298
+ "CVE-2018-15133",
291
299
  "CVE-2018-9276",
292
300
  "CVE-2019-0344",
293
301
  "CVE-2019-11001",
@@ -302,29 +310,52 @@
302
310
  "CVE-2020-15415",
303
311
  "CVE-2020-25078",
304
312
  "CVE-2020-25079",
313
+ "CVE-2020-2551",
305
314
  "CVE-2020-2883",
306
315
  "CVE-2021-20035",
307
316
  "CVE-2021-31196",
317
+ "CVE-2021-3129",
318
+ "CVE-2021-36380",
308
319
  "CVE-2021-40407",
309
320
  "CVE-2021-44529",
310
321
  "CVE-2022-1471",
311
322
  "CVE-2022-21445",
312
323
  "CVE-2022-24816",
313
324
  "CVE-2022-43769",
325
+ "CVE-2023-1671",
314
326
  "CVE-2023-20118",
327
+ "CVE-2023-20273",
328
+ "CVE-2023-22527",
315
329
  "CVE-2023-24955",
316
330
  "CVE-2023-25280",
331
+ "CVE-2023-29300",
332
+ "CVE-2023-33246",
317
333
  "CVE-2023-33538",
334
+ "CVE-2023-36845",
335
+ "CVE-2023-38203",
336
+ "CVE-2023-38831",
318
337
  "CVE-2023-39780",
338
+ "CVE-2023-40044",
339
+ "CVE-2023-41179",
340
+ "CVE-2023-41265",
319
341
  "CVE-2023-43208",
320
342
  "CVE-2023-43654",
343
+ "CVE-2023-43770",
321
344
  "CVE-2023-44221",
322
345
  "CVE-2023-44467",
323
346
  "CVE-2023-45249",
347
+ "CVE-2023-46604",
348
+ "CVE-2023-46748",
349
+ "CVE-2023-47246",
350
+ "CVE-2023-47565",
324
351
  "CVE-2023-48022",
325
352
  "CVE-2023-48788",
353
+ "CVE-2023-49897",
354
+ "CVE-2023-5631",
326
355
  "CVE-2023-6016",
327
356
  "CVE-2023-6019",
357
+ "CVE-2023-6548",
358
+ "CVE-2023-7101",
328
359
  "CVE-2024-0129",
329
360
  "CVE-2024-11120",
330
361
  "CVE-2024-11392",
@@ -341,6 +372,8 @@
341
372
  "CVE-2024-21513",
342
373
  "CVE-2024-21575",
343
374
  "CVE-2024-21576",
375
+ "CVE-2024-21887",
376
+ "CVE-2024-21893",
344
377
  "CVE-2024-23113",
345
378
  "CVE-2024-23692",
346
379
  "CVE-2024-24590",
@@ -628,18 +661,38 @@
628
661
  "CVE-2021-43226",
629
662
  "CVE-2022-0185",
630
663
  "CVE-2022-0492",
664
+ "CVE-2022-22071",
665
+ "CVE-2022-22265",
631
666
  "CVE-2022-2586",
632
667
  "CVE-2022-38028",
668
+ "CVE-2022-48618",
633
669
  "CVE-2023-0386",
634
670
  "CVE-2023-25280",
671
+ "CVE-2023-28229",
672
+ "CVE-2023-29360",
673
+ "CVE-2023-33063",
674
+ "CVE-2023-33106",
675
+ "CVE-2023-33107",
676
+ "CVE-2023-35674",
677
+ "CVE-2023-36033",
678
+ "CVE-2023-36036",
635
679
  "CVE-2023-36424",
680
+ "CVE-2023-36802",
636
681
  "CVE-2023-41974",
682
+ "CVE-2023-41992",
683
+ "CVE-2023-4211",
684
+ "CVE-2023-42824",
637
685
  "CVE-2023-43000",
686
+ "CVE-2023-4911",
687
+ "CVE-2023-6345",
638
688
  "CVE-2024-0769",
639
689
  "CVE-2024-1086",
640
690
  "CVE-2024-1212",
641
691
  "CVE-2024-20359",
642
692
  "CVE-2024-20399",
693
+ "CVE-2024-21338",
694
+ "CVE-2024-23225",
695
+ "CVE-2024-23296",
643
696
  "CVE-2024-26169",
644
697
  "CVE-2024-29748",
645
698
  "CVE-2024-30051",
@@ -786,12 +839,29 @@
786
839
  "CVE-2022-22948",
787
840
  "CVE-2022-23227",
788
841
  "CVE-2022-43939",
842
+ "CVE-2023-20109",
843
+ "CVE-2023-20198",
844
+ "CVE-2023-20269",
845
+ "CVE-2023-22515",
846
+ "CVE-2023-22518",
789
847
  "CVE-2023-27351",
848
+ "CVE-2023-27524",
849
+ "CVE-2023-28434",
850
+ "CVE-2023-29357",
851
+ "CVE-2023-35082",
852
+ "CVE-2023-41179",
853
+ "CVE-2023-42793",
790
854
  "CVE-2023-43791",
791
855
  "CVE-2023-45249",
856
+ "CVE-2023-46747",
857
+ "CVE-2023-46805",
858
+ "CVE-2023-47565",
792
859
  "CVE-2023-48365",
860
+ "CVE-2023-49897",
793
861
  "CVE-2023-50224",
794
862
  "CVE-2023-52163",
863
+ "CVE-2023-6448",
864
+ "CVE-2023-6548",
795
865
  "CVE-2023-7028",
796
866
  "CVE-2024-0012",
797
867
  "CVE-2024-12686",
@@ -799,6 +869,7 @@
799
869
  "CVE-2024-1709",
800
870
  "CVE-2024-20399",
801
871
  "CVE-2024-20439",
872
+ "CVE-2024-27198",
802
873
  "CVE-2024-27199",
803
874
  "CVE-2024-28987",
804
875
  "CVE-2024-3272",
@@ -1100,6 +1171,7 @@
1100
1171
  "Credential Access"
1101
1172
  ],
1102
1173
  "cve_refs": [
1174
+ "CVE-2023-20269",
1103
1175
  "CVE-2024-20481"
1104
1176
  ]
1105
1177
  },
@@ -1189,16 +1261,21 @@
1189
1261
  "CVE-2014-2120",
1190
1262
  "CVE-2014-3931",
1191
1263
  "CVE-2014-6278",
1264
+ "CVE-2014-8361",
1192
1265
  "CVE-2015-7755",
1193
1266
  "CVE-2016-10033",
1267
+ "CVE-2016-20017",
1194
1268
  "CVE-2016-3714",
1195
1269
  "CVE-2016-7836",
1196
1270
  "CVE-2017-1000353",
1197
1271
  "CVE-2017-12637",
1198
1272
  "CVE-2017-3066",
1199
1273
  "CVE-2017-3506",
1274
+ "CVE-2017-6884",
1200
1275
  "CVE-2017-7921",
1276
+ "CVE-2018-14667",
1201
1277
  "CVE-2018-14933",
1278
+ "CVE-2018-15133",
1202
1279
  "CVE-2018-19410",
1203
1280
  "CVE-2018-4063",
1204
1281
  "CVE-2018-9276",
@@ -1223,8 +1300,10 @@
1223
1300
  "CVE-2020-24363",
1224
1301
  "CVE-2020-25078",
1225
1302
  "CVE-2020-25079",
1303
+ "CVE-2020-2551",
1226
1304
  "CVE-2020-2883",
1227
1305
  "CVE-2020-29574",
1306
+ "CVE-2020-3259",
1228
1307
  "CVE-2020-7796",
1229
1308
  "CVE-2021-20035",
1230
1309
  "CVE-2021-20123",
@@ -1237,9 +1316,11 @@
1237
1316
  "CVE-2021-26828",
1238
1317
  "CVE-2021-26829",
1239
1318
  "CVE-2021-31196",
1319
+ "CVE-2021-3129",
1240
1320
  "CVE-2021-32030",
1241
1321
  "CVE-2021-33044",
1242
1322
  "CVE-2021-33045",
1323
+ "CVE-2021-36380",
1243
1324
  "CVE-2021-39935",
1244
1325
  "CVE-2021-40407",
1245
1326
  "CVE-2021-40655",
@@ -1257,39 +1338,83 @@
1257
1338
  "CVE-2022-40799",
1258
1339
  "CVE-2022-43769",
1259
1340
  "CVE-2022-43939",
1341
+ "CVE-2023-1671",
1342
+ "CVE-2023-20109",
1260
1343
  "CVE-2023-20118",
1344
+ "CVE-2023-20198",
1345
+ "CVE-2023-20269",
1346
+ "CVE-2023-20273",
1261
1347
  "CVE-2023-21529",
1348
+ "CVE-2023-22515",
1349
+ "CVE-2023-22518",
1350
+ "CVE-2023-22527",
1351
+ "CVE-2023-23752",
1262
1352
  "CVE-2023-24955",
1263
1353
  "CVE-2023-25280",
1264
1354
  "CVE-2023-2533",
1265
1355
  "CVE-2023-27351",
1356
+ "CVE-2023-27524",
1357
+ "CVE-2023-28434",
1266
1358
  "CVE-2023-28461",
1359
+ "CVE-2023-29300",
1360
+ "CVE-2023-29357",
1361
+ "CVE-2023-29552",
1362
+ "CVE-2023-33246",
1267
1363
  "CVE-2023-33538",
1364
+ "CVE-2023-34048",
1365
+ "CVE-2023-35082",
1268
1366
  "CVE-2023-3519",
1367
+ "CVE-2023-36844",
1368
+ "CVE-2023-36845",
1369
+ "CVE-2023-36846",
1370
+ "CVE-2023-36847",
1371
+ "CVE-2023-36851",
1372
+ "CVE-2023-38203",
1269
1373
  "CVE-2023-38950",
1270
1374
  "CVE-2023-39780",
1375
+ "CVE-2023-40044",
1376
+ "CVE-2023-41179",
1377
+ "CVE-2023-41265",
1378
+ "CVE-2023-41266",
1379
+ "CVE-2023-41763",
1380
+ "CVE-2023-42793",
1271
1381
  "CVE-2023-43208",
1272
1382
  "CVE-2023-4346",
1273
1383
  "CVE-2023-43654",
1384
+ "CVE-2023-43770",
1274
1385
  "CVE-2023-43791",
1275
1386
  "CVE-2023-44221",
1276
1387
  "CVE-2023-45249",
1277
1388
  "CVE-2023-45727",
1389
+ "CVE-2023-46604",
1390
+ "CVE-2023-46747",
1391
+ "CVE-2023-46748",
1392
+ "CVE-2023-46805",
1278
1393
  "CVE-2023-47117",
1394
+ "CVE-2023-47246",
1395
+ "CVE-2023-47565",
1279
1396
  "CVE-2023-48022",
1280
1397
  "CVE-2023-48365",
1281
1398
  "CVE-2023-48788",
1399
+ "CVE-2023-49103",
1400
+ "CVE-2023-4966",
1401
+ "CVE-2023-49897",
1282
1402
  "CVE-2023-50224",
1283
1403
  "CVE-2023-51449",
1284
1404
  "CVE-2023-51764",
1285
1405
  "CVE-2023-51765",
1286
1406
  "CVE-2023-51766",
1287
1407
  "CVE-2023-52163",
1408
+ "CVE-2023-5631",
1288
1409
  "CVE-2023-6016",
1289
1410
  "CVE-2023-6019",
1290
1411
  "CVE-2023-6021",
1291
1412
  "CVE-2023-6038",
1413
+ "CVE-2023-6448",
1414
+ "CVE-2023-6548",
1415
+ "CVE-2023-6549",
1292
1416
  "CVE-2023-7028",
1417
+ "CVE-2023-7101",
1293
1418
  "CVE-2024-0012",
1294
1419
  "CVE-2024-0769",
1295
1420
  "CVE-2024-11120",
@@ -1312,13 +1437,17 @@
1312
1437
  "CVE-2024-20953",
1313
1438
  "CVE-2024-21182",
1314
1439
  "CVE-2024-21287",
1440
+ "CVE-2024-21410",
1315
1441
  "CVE-2024-21575",
1316
1442
  "CVE-2024-21576",
1317
1443
  "CVE-2024-21762",
1444
+ "CVE-2024-21887",
1445
+ "CVE-2024-21893",
1318
1446
  "CVE-2024-23113",
1319
1447
  "CVE-2024-23692",
1320
1448
  "CVE-2024-23897",
1321
1449
  "CVE-2024-24919",
1450
+ "CVE-2024-27198",
1322
1451
  "CVE-2024-27199",
1323
1452
  "CVE-2024-27348",
1324
1453
  "CVE-2024-27443",
@@ -1806,9 +1935,26 @@
1806
1935
  "CVE-2020-9715",
1807
1936
  "CVE-2021-30952",
1808
1937
  "CVE-2022-48503",
1938
+ "CVE-2023-21608",
1939
+ "CVE-2023-26369",
1940
+ "CVE-2023-38831",
1941
+ "CVE-2023-41061",
1942
+ "CVE-2023-41064",
1809
1943
  "CVE-2023-41974",
1944
+ "CVE-2023-41990",
1945
+ "CVE-2023-41993",
1946
+ "CVE-2023-42916",
1947
+ "CVE-2023-42917",
1810
1948
  "CVE-2023-43000",
1949
+ "CVE-2023-4762",
1950
+ "CVE-2023-4863",
1951
+ "CVE-2023-5217",
1952
+ "CVE-2023-6345",
1953
+ "CVE-2023-7024",
1954
+ "CVE-2024-0519",
1955
+ "CVE-2024-21351",
1811
1956
  "CVE-2024-21413",
1957
+ "CVE-2024-23222",
1812
1958
  "CVE-2024-29988",
1813
1959
  "CVE-2024-30040",
1814
1960
  "CVE-2024-37383",
@@ -2209,14 +2355,18 @@
2209
2355
  "name": "Unsecured Credentials",
2210
2356
  "version": "v19",
2211
2357
  "cve_refs": [
2358
+ "CVE-2018-15133",
2212
2359
  "CVE-2019-5418",
2213
2360
  "CVE-2021-22681",
2214
2361
  "CVE-2021-40655",
2215
2362
  "CVE-2021-43798",
2216
2363
  "CVE-2021-44207",
2217
2364
  "CVE-2022-22948",
2365
+ "CVE-2023-23752",
2366
+ "CVE-2023-27524",
2218
2367
  "CVE-2023-38950",
2219
2368
  "CVE-2023-47117",
2369
+ "CVE-2023-49103",
2220
2370
  "CVE-2024-0769",
2221
2371
  "CVE-2024-12450",
2222
2372
  "CVE-2024-21413",
@@ -2452,9 +2602,11 @@
2452
2602
  "CVE-2011-0411",
2453
2603
  "CVE-2021-33515",
2454
2604
  "CVE-2021-38371",
2605
+ "CVE-2023-36761",
2455
2606
  "CVE-2024-13159",
2456
2607
  "CVE-2024-13160",
2457
2608
  "CVE-2024-13161",
2609
+ "CVE-2024-21410",
2458
2610
  "CVE-2025-24054"
2459
2611
  ]
2460
2612
  },
@@ -3233,7 +3385,9 @@
3233
3385
  "version": "v19",
3234
3386
  "cve_refs": [
3235
3387
  "CVE-2021-41277",
3388
+ "CVE-2023-21237",
3236
3389
  "CVE-2023-36424",
3390
+ "CVE-2023-36563",
3237
3391
  "CVE-2023-45727",
3238
3392
  "CVE-2023-51449",
3239
3393
  "CVE-2023-6038",
@@ -3557,9 +3711,12 @@
3557
3711
  "last_verified": "2026-05-19",
3558
3712
  "notes": "Added v0.13.17 to support DoS-class KEV bulk imports.",
3559
3713
  "cve_refs": [
3714
+ "CVE-2023-20109",
3715
+ "CVE-2023-29552",
3560
3716
  "CVE-2023-4346",
3561
3717
  "CVE-2023-50387",
3562
3718
  "CVE-2023-50868",
3719
+ "CVE-2023-6549",
3563
3720
  "CVE-2024-20353",
3564
3721
  "CVE-2024-20481",
3565
3722
  "CVE-2024-3393",
@@ -4371,6 +4528,9 @@
4371
4528
  "CVE-2021-26086",
4372
4529
  "CVE-2021-41277",
4373
4530
  "CVE-2023-28461",
4531
+ "CVE-2023-36851",
4532
+ "CVE-2023-41266",
4533
+ "CVE-2023-46805",
4374
4534
  "CVE-2023-51449",
4375
4535
  "CVE-2023-6021",
4376
4536
  "CVE-2023-6038",
@@ -4565,6 +4725,8 @@
4565
4725
  "is_subtechnique": false,
4566
4726
  "cve_refs": [
4567
4727
  "CVE-2014-0502",
4728
+ "CVE-2023-36025",
4729
+ "CVE-2023-41990",
4568
4730
  "CVE-2023-48365",
4569
4731
  "CVE-2024-38178",
4570
4732
  "CVE-2024-38213",
@@ -4947,6 +5109,9 @@
4947
5109
  "CVE-2014-100005",
4948
5110
  "CVE-2018-19410",
4949
5111
  "CVE-2022-23227",
5112
+ "CVE-2023-20198",
5113
+ "CVE-2023-22515",
5114
+ "CVE-2023-22518",
4950
5115
  "CVE-2024-11680",
4951
5116
  "CVE-2024-40711",
4952
5117
  "CVE-2024-55591",
@@ -5057,9 +5222,12 @@
5057
5222
  "stix_id": "attack-pattern--b77cf5f3-6060-475d-bd60-40ccbf28fdc2",
5058
5223
  "is_subtechnique": false,
5059
5224
  "cve_refs": [
5225
+ "CVE-2023-36563",
5226
+ "CVE-2023-36761",
5060
5227
  "CVE-2024-13159",
5061
5228
  "CVE-2024-13160",
5062
5229
  "CVE-2024-13161",
5230
+ "CVE-2024-21410",
5063
5231
  "CVE-2024-43451",
5064
5232
  "CVE-2025-24054"
5065
5233
  ]
@@ -5261,6 +5429,7 @@
5261
5429
  "is_subtechnique": false,
5262
5430
  "cve_refs": [
5263
5431
  "CVE-2008-4250",
5432
+ "CVE-2023-34048",
5264
5433
  "CVE-2024-12356",
5265
5434
  "CVE-2024-38812",
5266
5435
  "CVE-2024-38813"
@@ -5290,6 +5459,12 @@
5290
5459
  "is_subtechnique": false,
5291
5460
  "cve_refs": [
5292
5461
  "CVE-2013-0643",
5462
+ "CVE-2022-48618",
5463
+ "CVE-2023-36025",
5464
+ "CVE-2023-36584",
5465
+ "CVE-2023-41991",
5466
+ "CVE-2024-21351",
5467
+ "CVE-2024-21412",
5293
5468
  "CVE-2024-29988",
5294
5469
  "CVE-2024-38193",
5295
5470
  "CVE-2024-38213",
@@ -5838,6 +6013,8 @@
5838
6013
  "stix_id": "attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814",
5839
6014
  "is_subtechnique": false,
5840
6015
  "cve_refs": [
6016
+ "CVE-2023-29357",
6017
+ "CVE-2023-4966",
5841
6018
  "CVE-2026-56155"
5842
6019
  ]
5843
6020
  },
@@ -12830,9 +13007,16 @@
12830
13007
  "CVE-2021-26828",
12831
13008
  "CVE-2021-31196",
12832
13009
  "CVE-2023-28461",
13010
+ "CVE-2023-36846",
13011
+ "CVE-2023-36847",
13012
+ "CVE-2023-36851",
13013
+ "CVE-2023-47246",
12833
13014
  "CVE-2024-0012",
12834
13015
  "CVE-2024-11680",
12835
13016
  "CVE-2024-1708",
13017
+ "CVE-2024-21887",
13018
+ "CVE-2024-21893",
13019
+ "CVE-2024-27198",
12836
13020
  "CVE-2024-3400",
12837
13021
  "CVE-2024-38094",
12838
13022
  "CVE-2024-39717",