@blamejs/exceptd-skills 0.18.23 → 0.18.25

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (15) hide show
  1. package/CHANGELOG.md +8 -0
  2. package/README.md +1 -1
  3. package/data/_indexes/_meta.json +10 -10
  4. package/data/_indexes/activity-feed.json +11 -11
  5. package/data/_indexes/catalog-summaries.json +10 -10
  6. package/data/_indexes/chains.json +110629 -39555
  7. package/data/_indexes/frequency.json +5 -0
  8. package/data/attack-techniques.json +203 -2
  9. package/data/cve-catalog.json +9938 -63
  10. package/data/cwe-catalog.json +244 -1
  11. package/data/framework-control-gaps.json +610 -3
  12. package/data/zeroday-lessons.json +6091 -2
  13. package/manifest.json +53 -53
  14. package/package.json +2 -2
  15. package/sbom.cdx.json +25 -25
package/data/_indexes/frequency.json CHANGED
@@ -3196,6 +3196,7 @@
3196
3196
  "CWE-282",
3197
3197
  "CWE-285",
3198
3198
  "CWE-288",
3199
+ "CWE-295",
3199
3200
  "CWE-303",
3200
3201
  "CWE-305",
3201
3202
  "CWE-310",
@@ -3213,6 +3214,7 @@
3213
3214
  "CWE-340",
3214
3215
  "CWE-346",
3215
3216
  "CWE-35",
3217
+ "CWE-351",
3216
3218
  "CWE-358",
3217
3219
  "CWE-36",
3218
3220
  "CWE-367",
@@ -3234,6 +3236,7 @@
3234
3236
  "CWE-451",
3235
3237
  "CWE-470",
3236
3238
  "CWE-472",
3239
+ "CWE-473",
3237
3240
  "CWE-476",
3238
3241
  "CWE-501",
3239
3242
  "CWE-506",
@@ -3268,6 +3271,7 @@
3268
3271
  "CWE-680",
3269
3272
  "CWE-693",
3270
3273
  "CWE-697",
3274
+ "CWE-703",
3271
3275
  "CWE-706",
3272
3276
  "CWE-707",
3273
3277
  "CWE-73",
@@ -3282,6 +3286,7 @@
3282
3286
  "CWE-783",
3283
3287
  "CWE-80",
3284
3288
  "CWE-822",
3289
+ "CWE-823",
3285
3290
  "CWE-835",
3286
3291
  "CWE-843",
3287
3292
  "CWE-88",
package/data/attack-techniques.json CHANGED
@@ -162,6 +162,9 @@
162
162
  "DS0009"
163
163
  ],
164
164
  "cve_refs": [
165
+ "CVE-2023-21237",
166
+ "CVE-2023-36584",
167
+ "CVE-2024-21412",
165
168
  "CVE-2024-43461",
166
169
  "CVE-2024-43572",
167
170
  "CVE-2026-32202"
@@ -282,12 +285,17 @@
282
285
  "CVE-2008-4128",
283
286
  "CVE-2014-3931",
284
287
  "CVE-2014-6278",
288
+ "CVE-2014-8361",
285
289
  "CVE-2016-10033",
290
+ "CVE-2016-20017",
286
291
  "CVE-2016-3714",
287
292
  "CVE-2017-1000353",
288
293
  "CVE-2017-3066",
289
294
  "CVE-2017-3506",
295
+ "CVE-2017-6884",
296
+ "CVE-2018-14667",
290
297
  "CVE-2018-14933",
298
+ "CVE-2018-15133",
291
299
  "CVE-2018-9276",
292
300
  "CVE-2019-0344",
293
301
  "CVE-2019-11001",
@@ -302,29 +310,52 @@
302
310
  "CVE-2020-15415",
303
311
  "CVE-2020-25078",
304
312
  "CVE-2020-25079",
313
+ "CVE-2020-2551",
305
314
  "CVE-2020-2883",
306
315
  "CVE-2021-20035",
307
316
  "CVE-2021-31196",
317
+ "CVE-2021-3129",
318
+ "CVE-2021-36380",
308
319
  "CVE-2021-40407",
309
320
  "CVE-2021-44529",
310
321
  "CVE-2022-1471",
311
322
  "CVE-2022-21445",
312
323
  "CVE-2022-24816",
313
324
  "CVE-2022-43769",
325
+ "CVE-2023-1671",
314
326
  "CVE-2023-20118",
327
+ "CVE-2023-20273",
328
+ "CVE-2023-22527",
315
329
  "CVE-2023-24955",
316
330
  "CVE-2023-25280",
331
+ "CVE-2023-29300",
332
+ "CVE-2023-33246",
317
333
  "CVE-2023-33538",
334
+ "CVE-2023-36845",
335
+ "CVE-2023-38203",
336
+ "CVE-2023-38831",
318
337
  "CVE-2023-39780",
338
+ "CVE-2023-40044",
339
+ "CVE-2023-41179",
340
+ "CVE-2023-41265",
319
341
  "CVE-2023-43208",
320
342
  "CVE-2023-43654",
343
+ "CVE-2023-43770",
321
344
  "CVE-2023-44221",
322
345
  "CVE-2023-44467",
323
346
  "CVE-2023-45249",
347
+ "CVE-2023-46604",
348
+ "CVE-2023-46748",
349
+ "CVE-2023-47246",
350
+ "CVE-2023-47565",
324
351
  "CVE-2023-48022",
325
352
  "CVE-2023-48788",
353
+ "CVE-2023-49897",
354
+ "CVE-2023-5631",
326
355
  "CVE-2023-6016",
327
356
  "CVE-2023-6019",
357
+ "CVE-2023-6548",
358
+ "CVE-2023-7101",
328
359
  "CVE-2024-0129",
329
360
  "CVE-2024-11120",
330
361
  "CVE-2024-11392",
@@ -341,6 +372,8 @@
341
372
  "CVE-2024-21513",
342
373
  "CVE-2024-21575",
343
374
  "CVE-2024-21576",
375
+ "CVE-2024-21887",
376
+ "CVE-2024-21893",
344
377
  "CVE-2024-23113",
345
378
  "CVE-2024-23692",
346
379
  "CVE-2024-24590",
@@ -506,6 +539,7 @@
506
539
  "CVE-2026-48282",
507
540
  "CVE-2026-5760",
508
541
  "CVE-2026-58644",
542
+ "CVE-2026-63030",
509
543
  "CVE-2026-6973"
510
544
  ],
511
545
  "description_full": "Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of [Unix Shell](https://attack.mitre.org/techniques/T1059/004) while Windows installations include the [Windows Command Shell](https://attack.mitre.org/techniques/T1059/003) and [PowerShell](https://attack.mitre.org/techniques/T1059/001). There are also cross-platform interpreters such as [Python](https://attack.mitre.org/techniques/T1059/006), as well as those commonly associated with client applications such as [JavaScript](https://attack.mitre.org/techniques/T1059/007) and [Visual Basic](https://attack.mitre.org/techniques/T1059/005). Adversaries may abuse these technologies in various ways as a means of executing arbitrary commands. Commands and scripts can be embedded in [Initial Access](https://attack.mitre.org/tactics/TA0001) payloads delivered to victims as lure documents or as secondary payloads downloaded from an existing C2. Adversaries may also execute commands through interactive terminals/shells, as well as utilize various [Remote Services](https://attack.mitre.org/techniques/T1021) in order to achieve remote Execution.(Citation: Powershell Remote Commands)(Citation: Cisco IOS Software Integrity Assurance - Command History)(Citation: Remote Shell Execution in Python)",
@@ -556,6 +590,7 @@
556
590
  "CVE-2024-5565",
557
591
  "CVE-2025-3248",
558
592
  "CVE-2025-49844",
593
+ "CVE-2026-0770",
559
594
  "CVE-2026-31230",
560
595
  "CVE-2026-33017",
561
596
  "MAL-2026-3083"
@@ -628,18 +663,38 @@
628
663
  "CVE-2021-43226",
629
664
  "CVE-2022-0185",
630
665
  "CVE-2022-0492",
666
+ "CVE-2022-22071",
667
+ "CVE-2022-22265",
631
668
  "CVE-2022-2586",
632
669
  "CVE-2022-38028",
670
+ "CVE-2022-48618",
633
671
  "CVE-2023-0386",
634
672
  "CVE-2023-25280",
673
+ "CVE-2023-28229",
674
+ "CVE-2023-29360",
675
+ "CVE-2023-33063",
676
+ "CVE-2023-33106",
677
+ "CVE-2023-33107",
678
+ "CVE-2023-35674",
679
+ "CVE-2023-36033",
680
+ "CVE-2023-36036",
635
681
  "CVE-2023-36424",
682
+ "CVE-2023-36802",
636
683
  "CVE-2023-41974",
684
+ "CVE-2023-41992",
685
+ "CVE-2023-4211",
686
+ "CVE-2023-42824",
637
687
  "CVE-2023-43000",
688
+ "CVE-2023-4911",
689
+ "CVE-2023-6345",
638
690
  "CVE-2024-0769",
639
691
  "CVE-2024-1086",
640
692
  "CVE-2024-1212",
641
693
  "CVE-2024-20359",
642
694
  "CVE-2024-20399",
695
+ "CVE-2024-21338",
696
+ "CVE-2024-23225",
697
+ "CVE-2024-23296",
643
698
  "CVE-2024-26169",
644
699
  "CVE-2024-29748",
645
700
  "CVE-2024-30051",
@@ -786,12 +841,29 @@
786
841
  "CVE-2022-22948",
787
842
  "CVE-2022-23227",
788
843
  "CVE-2022-43939",
844
+ "CVE-2023-20109",
845
+ "CVE-2023-20198",
846
+ "CVE-2023-20269",
847
+ "CVE-2023-22515",
848
+ "CVE-2023-22518",
789
849
  "CVE-2023-27351",
850
+ "CVE-2023-27524",
851
+ "CVE-2023-28434",
852
+ "CVE-2023-29357",
853
+ "CVE-2023-35082",
854
+ "CVE-2023-41179",
855
+ "CVE-2023-42793",
790
856
  "CVE-2023-43791",
791
857
  "CVE-2023-45249",
858
+ "CVE-2023-46747",
859
+ "CVE-2023-46805",
860
+ "CVE-2023-47565",
792
861
  "CVE-2023-48365",
862
+ "CVE-2023-49897",
793
863
  "CVE-2023-50224",
794
864
  "CVE-2023-52163",
865
+ "CVE-2023-6448",
866
+ "CVE-2023-6548",
795
867
  "CVE-2023-7028",
796
868
  "CVE-2024-0012",
797
869
  "CVE-2024-12686",
@@ -799,6 +871,7 @@
799
871
  "CVE-2024-1709",
800
872
  "CVE-2024-20399",
801
873
  "CVE-2024-20439",
874
+ "CVE-2024-27198",
802
875
  "CVE-2024-27199",
803
876
  "CVE-2024-28987",
804
877
  "CVE-2024-3272",
@@ -1100,6 +1173,7 @@
1100
1173
  "Credential Access"
1101
1174
  ],
1102
1175
  "cve_refs": [
1176
+ "CVE-2023-20269",
1103
1177
  "CVE-2024-20481"
1104
1178
  ]
1105
1179
  },
@@ -1177,6 +1251,9 @@
1177
1251
  "description": "Adversaries may create a local account to maintain access to victim systems.",
1178
1252
  "tactic": [
1179
1253
  "Persistence"
1254
+ ],
1255
+ "cve_refs": [
1256
+ "CVE-2026-63030"
1180
1257
  ]
1181
1258
  },
1182
1259
  "T1190": {
@@ -1189,16 +1266,21 @@
1189
1266
  "CVE-2014-2120",
1190
1267
  "CVE-2014-3931",
1191
1268
  "CVE-2014-6278",
1269
+ "CVE-2014-8361",
1192
1270
  "CVE-2015-7755",
1193
1271
  "CVE-2016-10033",
1272
+ "CVE-2016-20017",
1194
1273
  "CVE-2016-3714",
1195
1274
  "CVE-2016-7836",
1196
1275
  "CVE-2017-1000353",
1197
1276
  "CVE-2017-12637",
1198
1277
  "CVE-2017-3066",
1199
1278
  "CVE-2017-3506",
1279
+ "CVE-2017-6884",
1200
1280
  "CVE-2017-7921",
1281
+ "CVE-2018-14667",
1201
1282
  "CVE-2018-14933",
1283
+ "CVE-2018-15133",
1202
1284
  "CVE-2018-19410",
1203
1285
  "CVE-2018-4063",
1204
1286
  "CVE-2018-9276",
@@ -1223,8 +1305,10 @@
1223
1305
  "CVE-2020-24363",
1224
1306
  "CVE-2020-25078",
1225
1307
  "CVE-2020-25079",
1308
+ "CVE-2020-2551",
1226
1309
  "CVE-2020-2883",
1227
1310
  "CVE-2020-29574",
1311
+ "CVE-2020-3259",
1228
1312
  "CVE-2020-7796",
1229
1313
  "CVE-2021-20035",
1230
1314
  "CVE-2021-20123",
@@ -1236,10 +1320,13 @@
1236
1320
  "CVE-2021-26086",
1237
1321
  "CVE-2021-26828",
1238
1322
  "CVE-2021-26829",
1323
+ "CVE-2021-27137",
1239
1324
  "CVE-2021-31196",
1325
+ "CVE-2021-3129",
1240
1326
  "CVE-2021-32030",
1241
1327
  "CVE-2021-33044",
1242
1328
  "CVE-2021-33045",
1329
+ "CVE-2021-36380",
1243
1330
  "CVE-2021-39935",
1244
1331
  "CVE-2021-40407",
1245
1332
  "CVE-2021-40655",
@@ -1257,39 +1344,83 @@
1257
1344
  "CVE-2022-40799",
1258
1345
  "CVE-2022-43769",
1259
1346
  "CVE-2022-43939",
1347
+ "CVE-2023-1671",
1348
+ "CVE-2023-20109",
1260
1349
  "CVE-2023-20118",
1350
+ "CVE-2023-20198",
1351
+ "CVE-2023-20269",
1352
+ "CVE-2023-20273",
1261
1353
  "CVE-2023-21529",
1354
+ "CVE-2023-22515",
1355
+ "CVE-2023-22518",
1356
+ "CVE-2023-22527",
1357
+ "CVE-2023-23752",
1262
1358
  "CVE-2023-24955",
1263
1359
  "CVE-2023-25280",
1264
1360
  "CVE-2023-2533",
1265
1361
  "CVE-2023-27351",
1362
+ "CVE-2023-27524",
1363
+ "CVE-2023-28434",
1266
1364
  "CVE-2023-28461",
1365
+ "CVE-2023-29300",
1366
+ "CVE-2023-29357",
1367
+ "CVE-2023-29552",
1368
+ "CVE-2023-33246",
1267
1369
  "CVE-2023-33538",
1370
+ "CVE-2023-34048",
1371
+ "CVE-2023-35082",
1268
1372
  "CVE-2023-3519",
1373
+ "CVE-2023-36844",
1374
+ "CVE-2023-36845",
1375
+ "CVE-2023-36846",
1376
+ "CVE-2023-36847",
1377
+ "CVE-2023-36851",
1378
+ "CVE-2023-38203",
1269
1379
  "CVE-2023-38950",
1270
1380
  "CVE-2023-39780",
1381
+ "CVE-2023-40044",
1382
+ "CVE-2023-41179",
1383
+ "CVE-2023-41265",
1384
+ "CVE-2023-41266",
1385
+ "CVE-2023-41763",
1386
+ "CVE-2023-42793",
1271
1387
  "CVE-2023-43208",
1272
1388
  "CVE-2023-4346",
1273
1389
  "CVE-2023-43654",
1390
+ "CVE-2023-43770",
1274
1391
  "CVE-2023-43791",
1275
1392
  "CVE-2023-44221",
1276
1393
  "CVE-2023-45249",
1277
1394
  "CVE-2023-45727",
1395
+ "CVE-2023-46604",
1396
+ "CVE-2023-46747",
1397
+ "CVE-2023-46748",
1398
+ "CVE-2023-46805",
1278
1399
  "CVE-2023-47117",
1400
+ "CVE-2023-47246",
1401
+ "CVE-2023-47565",
1279
1402
  "CVE-2023-48022",
1280
1403
  "CVE-2023-48365",
1281
1404
  "CVE-2023-48788",
1405
+ "CVE-2023-49103",
1406
+ "CVE-2023-4966",
1407
+ "CVE-2023-49897",
1282
1408
  "CVE-2023-50224",
1283
1409
  "CVE-2023-51449",
1284
1410
  "CVE-2023-51764",
1285
1411
  "CVE-2023-51765",
1286
1412
  "CVE-2023-51766",
1287
1413
  "CVE-2023-52163",
1414
+ "CVE-2023-5631",
1288
1415
  "CVE-2023-6016",
1289
1416
  "CVE-2023-6019",
1290
1417
  "CVE-2023-6021",
1291
1418
  "CVE-2023-6038",
1419
+ "CVE-2023-6448",
1420
+ "CVE-2023-6548",
1421
+ "CVE-2023-6549",
1292
1422
  "CVE-2023-7028",
1423
+ "CVE-2023-7101",
1293
1424
  "CVE-2024-0012",
1294
1425
  "CVE-2024-0769",
1295
1426
  "CVE-2024-11120",
@@ -1312,13 +1443,17 @@
1312
1443
  "CVE-2024-20953",
1313
1444
  "CVE-2024-21182",
1314
1445
  "CVE-2024-21287",
1446
+ "CVE-2024-21410",
1315
1447
  "CVE-2024-21575",
1316
1448
  "CVE-2024-21576",
1317
1449
  "CVE-2024-21762",
1450
+ "CVE-2024-21887",
1451
+ "CVE-2024-21893",
1318
1452
  "CVE-2024-23113",
1319
1453
  "CVE-2024-23692",
1320
1454
  "CVE-2024-23897",
1321
1455
  "CVE-2024-24919",
1456
+ "CVE-2024-27198",
1322
1457
  "CVE-2024-27199",
1323
1458
  "CVE-2024-27348",
1324
1459
  "CVE-2024-27443",
@@ -1539,6 +1674,7 @@
1539
1674
  "CVE-2026-0257",
1540
1675
  "CVE-2026-0300",
1541
1676
  "CVE-2026-0766",
1677
+ "CVE-2026-0770",
1542
1678
  "CVE-2026-10520",
1543
1679
  "CVE-2026-12569",
1544
1680
  "CVE-2026-1281",
@@ -1625,6 +1761,8 @@
1625
1761
  "CVE-2026-56291",
1626
1762
  "CVE-2026-5760",
1627
1763
  "CVE-2026-58644",
1764
+ "CVE-2026-60137",
1765
+ "CVE-2026-63030",
1628
1766
  "CVE-2026-6973",
1629
1767
  "CVE-2026-7473",
1630
1768
  "CVE-2026-7482",
@@ -1806,9 +1944,26 @@
1806
1944
  "CVE-2020-9715",
1807
1945
  "CVE-2021-30952",
1808
1946
  "CVE-2022-48503",
1947
+ "CVE-2023-21608",
1948
+ "CVE-2023-26369",
1949
+ "CVE-2023-38831",
1950
+ "CVE-2023-41061",
1951
+ "CVE-2023-41064",
1809
1952
  "CVE-2023-41974",
1953
+ "CVE-2023-41990",
1954
+ "CVE-2023-41993",
1955
+ "CVE-2023-42916",
1956
+ "CVE-2023-42917",
1810
1957
  "CVE-2023-43000",
1958
+ "CVE-2023-4762",
1959
+ "CVE-2023-4863",
1960
+ "CVE-2023-5217",
1961
+ "CVE-2023-6345",
1962
+ "CVE-2023-7024",
1963
+ "CVE-2024-0519",
1964
+ "CVE-2024-21351",
1811
1965
  "CVE-2024-21413",
1966
+ "CVE-2024-23222",
1812
1967
  "CVE-2024-29988",
1813
1968
  "CVE-2024-30040",
1814
1969
  "CVE-2024-37383",
@@ -1943,7 +2098,8 @@
1943
2098
  "CVE-2026-20133",
1944
2099
  "CVE-2026-21858",
1945
2100
  "CVE-2026-22218",
1946
- "CVE-2026-41950"
2101
+ "CVE-2026-41950",
2102
+ "CVE-2026-60137"
1947
2103
  ]
1948
2104
  },
1949
2105
  "T1485": {
@@ -2209,14 +2365,18 @@
2209
2365
  "name": "Unsecured Credentials",
2210
2366
  "version": "v19",
2211
2367
  "cve_refs": [
2368
+ "CVE-2018-15133",
2212
2369
  "CVE-2019-5418",
2213
2370
  "CVE-2021-22681",
2214
2371
  "CVE-2021-40655",
2215
2372
  "CVE-2021-43798",
2216
2373
  "CVE-2021-44207",
2217
2374
  "CVE-2022-22948",
2375
+ "CVE-2023-23752",
2376
+ "CVE-2023-27524",
2218
2377
  "CVE-2023-38950",
2219
2378
  "CVE-2023-47117",
2379
+ "CVE-2023-49103",
2220
2380
  "CVE-2024-0769",
2221
2381
  "CVE-2024-12450",
2222
2382
  "CVE-2024-21413",
@@ -2277,6 +2437,7 @@
2277
2437
  "CVE-2024-48248",
2278
2438
  "CVE-2024-6587",
2279
2439
  "CVE-2025-21085",
2440
+ "CVE-2026-0770",
2280
2441
  "CVE-2026-30615",
2281
2442
  "MAL-2026-3083",
2282
2443
  "MAL-2026-MOIKA-DEPCONFUSION",
@@ -2337,6 +2498,9 @@
2337
2498
  "description": "Adversaries may attempt to access the Cloud Instance Metadata API to collect credentials and other sensitive data.",
2338
2499
  "tactic": [
2339
2500
  "Credential Access"
2501
+ ],
2502
+ "cve_refs": [
2503
+ "CVE-2026-0770"
2340
2504
  ]
2341
2505
  },
2342
2506
  "T1552.007": {
@@ -2452,9 +2616,11 @@
2452
2616
  "CVE-2011-0411",
2453
2617
  "CVE-2021-33515",
2454
2618
  "CVE-2021-38371",
2619
+ "CVE-2023-36761",
2455
2620
  "CVE-2024-13159",
2456
2621
  "CVE-2024-13160",
2457
2622
  "CVE-2024-13161",
2623
+ "CVE-2024-21410",
2458
2624
  "CVE-2025-24054"
2459
2625
  ]
2460
2626
  },
@@ -3233,7 +3399,9 @@
3233
3399
  "version": "v19",
3234
3400
  "cve_refs": [
3235
3401
  "CVE-2021-41277",
3402
+ "CVE-2023-21237",
3236
3403
  "CVE-2023-36424",
3404
+ "CVE-2023-36563",
3237
3405
  "CVE-2023-45727",
3238
3406
  "CVE-2023-51449",
3239
3407
  "CVE-2023-6038",
@@ -3328,6 +3496,7 @@
3328
3496
  "name": "Network Denial of Service",
3329
3497
  "version": "v19",
3330
3498
  "cve_refs": [
3499
+ "CVE-2021-27137",
3331
3500
  "CVE-2023-44487",
3332
3501
  "CVE-2023-50387",
3333
3502
  "CVE-2023-50868",
@@ -3557,9 +3726,12 @@
3557
3726
  "last_verified": "2026-05-19",
3558
3727
  "notes": "Added v0.13.17 to support DoS-class KEV bulk imports.",
3559
3728
  "cve_refs": [
3729
+ "CVE-2023-20109",
3730
+ "CVE-2023-29552",
3560
3731
  "CVE-2023-4346",
3561
3732
  "CVE-2023-50387",
3562
3733
  "CVE-2023-50868",
3734
+ "CVE-2023-6549",
3563
3735
  "CVE-2024-20353",
3564
3736
  "CVE-2024-20481",
3565
3737
  "CVE-2024-3393",
@@ -4371,6 +4543,9 @@
4371
4543
  "CVE-2021-26086",
4372
4544
  "CVE-2021-41277",
4373
4545
  "CVE-2023-28461",
4546
+ "CVE-2023-36851",
4547
+ "CVE-2023-41266",
4548
+ "CVE-2023-46805",
4374
4549
  "CVE-2023-51449",
4375
4550
  "CVE-2023-6021",
4376
4551
  "CVE-2023-6038",
@@ -4565,6 +4740,8 @@
4565
4740
  "is_subtechnique": false,
4566
4741
  "cve_refs": [
4567
4742
  "CVE-2014-0502",
4743
+ "CVE-2023-36025",
4744
+ "CVE-2023-41990",
4568
4745
  "CVE-2023-48365",
4569
4746
  "CVE-2024-38178",
4570
4747
  "CVE-2024-38213",
@@ -4947,6 +5124,9 @@
4947
5124
  "CVE-2014-100005",
4948
5125
  "CVE-2018-19410",
4949
5126
  "CVE-2022-23227",
5127
+ "CVE-2023-20198",
5128
+ "CVE-2023-22515",
5129
+ "CVE-2023-22518",
4950
5130
  "CVE-2024-11680",
4951
5131
  "CVE-2024-40711",
4952
5132
  "CVE-2024-55591",
@@ -5057,9 +5237,12 @@
5057
5237
  "stix_id": "attack-pattern--b77cf5f3-6060-475d-bd60-40ccbf28fdc2",
5058
5238
  "is_subtechnique": false,
5059
5239
  "cve_refs": [
5240
+ "CVE-2023-36563",
5241
+ "CVE-2023-36761",
5060
5242
  "CVE-2024-13159",
5061
5243
  "CVE-2024-13160",
5062
5244
  "CVE-2024-13161",
5245
+ "CVE-2024-21410",
5063
5246
  "CVE-2024-43451",
5064
5247
  "CVE-2025-24054"
5065
5248
  ]
@@ -5261,6 +5444,8 @@
5261
5444
  "is_subtechnique": false,
5262
5445
  "cve_refs": [
5263
5446
  "CVE-2008-4250",
5447
+ "CVE-2021-27137",
5448
+ "CVE-2023-34048",
5264
5449
  "CVE-2024-12356",
5265
5450
  "CVE-2024-38812",
5266
5451
  "CVE-2024-38813"
@@ -5290,6 +5475,12 @@
5290
5475
  "is_subtechnique": false,
5291
5476
  "cve_refs": [
5292
5477
  "CVE-2013-0643",
5478
+ "CVE-2022-48618",
5479
+ "CVE-2023-36025",
5480
+ "CVE-2023-36584",
5481
+ "CVE-2023-41991",
5482
+ "CVE-2024-21351",
5483
+ "CVE-2024-21412",
5293
5484
  "CVE-2024-29988",
5294
5485
  "CVE-2024-38193",
5295
5486
  "CVE-2024-38213",
@@ -5838,6 +6029,8 @@
5838
6029
  "stix_id": "attack-pattern--51a14c76-dd3b-440b-9c20-2bf91d25a814",
5839
6030
  "is_subtechnique": false,
5840
6031
  "cve_refs": [
6032
+ "CVE-2023-29357",
6033
+ "CVE-2023-4966",
5841
6034
  "CVE-2026-56155"
5842
6035
  ]
5843
6036
  },
@@ -12830,9 +13023,16 @@
12830
13023
  "CVE-2021-26828",
12831
13024
  "CVE-2021-31196",
12832
13025
  "CVE-2023-28461",
13026
+ "CVE-2023-36846",
13027
+ "CVE-2023-36847",
13028
+ "CVE-2023-36851",
13029
+ "CVE-2023-47246",
12833
13030
  "CVE-2024-0012",
12834
13031
  "CVE-2024-11680",
12835
13032
  "CVE-2024-1708",
13033
+ "CVE-2024-21887",
13034
+ "CVE-2024-21893",
13035
+ "CVE-2024-27198",
12836
13036
  "CVE-2024-3400",
12837
13037
  "CVE-2024-38094",
12838
13038
  "CVE-2024-39717",
@@ -12860,7 +13060,8 @@
12860
13060
  "CVE-2026-48939",
12861
13061
  "CVE-2026-56290",
12862
13062
  "CVE-2026-56291",
12863
- "CVE-2026-58644"
13063
+ "CVE-2026-58644",
13064
+ "CVE-2026-63030"
12864
13065
  ]
12865
13066
  },
12866
13067
  "T1505.004": {