@blamejs/exceptd-skills 0.18.24 → 0.18.26
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +8 -0
- package/data/_indexes/_meta.json +8 -8
- package/data/_indexes/activity-feed.json +10 -10
- package/data/_indexes/catalog-summaries.json +4 -4
- package/data/_indexes/chains.json +91307 -17170
- package/data/attack-techniques.json +19 -2
- package/data/cve-catalog.json +2005 -484
- package/data/cwe-catalog.json +5 -1
- package/data/framework-control-gaps.json +1156 -14
- package/data/zeroday-lessons.json +246 -2
- package/lib/validate-package.js +5 -2
- package/manifest.json +53 -53
- package/package.json +2 -2
- package/sbom.cdx.json +42 -27
- package/scripts/check-framework-gap-coverage.js +103 -0
- package/scripts/predeploy.js +11 -0
|
@@ -539,6 +539,7 @@
|
|
|
539
539
|
"CVE-2026-48282",
|
|
540
540
|
"CVE-2026-5760",
|
|
541
541
|
"CVE-2026-58644",
|
|
542
|
+
"CVE-2026-63030",
|
|
542
543
|
"CVE-2026-6973"
|
|
543
544
|
],
|
|
544
545
|
"description_full": "Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of [Unix Shell](https://attack.mitre.org/techniques/T1059/004) while Windows installations include the [Windows Command Shell](https://attack.mitre.org/techniques/T1059/003) and [PowerShell](https://attack.mitre.org/techniques/T1059/001). There are also cross-platform interpreters such as [Python](https://attack.mitre.org/techniques/T1059/006), as well as those commonly associated with client applications such as [JavaScript](https://attack.mitre.org/techniques/T1059/007) and [Visual Basic](https://attack.mitre.org/techniques/T1059/005). Adversaries may abuse these technologies in various ways as a means of executing arbitrary commands. Commands and scripts can be embedded in [Initial Access](https://attack.mitre.org/tactics/TA0001) payloads delivered to victims as lure documents or as secondary payloads downloaded from an existing C2. Adversaries may also execute commands through interactive terminals/shells, as well as utilize various [Remote Services](https://attack.mitre.org/techniques/T1021) in order to achieve remote Execution.(Citation: Powershell Remote Commands)(Citation: Cisco IOS Software Integrity Assurance - Command History)(Citation: Remote Shell Execution in Python)",
|
|
@@ -589,6 +590,7 @@
|
|
|
589
590
|
"CVE-2024-5565",
|
|
590
591
|
"CVE-2025-3248",
|
|
591
592
|
"CVE-2025-49844",
|
|
593
|
+
"CVE-2026-0770",
|
|
592
594
|
"CVE-2026-31230",
|
|
593
595
|
"CVE-2026-33017",
|
|
594
596
|
"MAL-2026-3083"
|
|
@@ -1249,6 +1251,9 @@
|
|
|
1249
1251
|
"description": "Adversaries may create a local account to maintain access to victim systems.",
|
|
1250
1252
|
"tactic": [
|
|
1251
1253
|
"Persistence"
|
|
1254
|
+
],
|
|
1255
|
+
"cve_refs": [
|
|
1256
|
+
"CVE-2026-63030"
|
|
1252
1257
|
]
|
|
1253
1258
|
},
|
|
1254
1259
|
"T1190": {
|
|
@@ -1315,6 +1320,7 @@
|
|
|
1315
1320
|
"CVE-2021-26086",
|
|
1316
1321
|
"CVE-2021-26828",
|
|
1317
1322
|
"CVE-2021-26829",
|
|
1323
|
+
"CVE-2021-27137",
|
|
1318
1324
|
"CVE-2021-31196",
|
|
1319
1325
|
"CVE-2021-3129",
|
|
1320
1326
|
"CVE-2021-32030",
|
|
@@ -1668,6 +1674,7 @@
|
|
|
1668
1674
|
"CVE-2026-0257",
|
|
1669
1675
|
"CVE-2026-0300",
|
|
1670
1676
|
"CVE-2026-0766",
|
|
1677
|
+
"CVE-2026-0770",
|
|
1671
1678
|
"CVE-2026-10520",
|
|
1672
1679
|
"CVE-2026-12569",
|
|
1673
1680
|
"CVE-2026-1281",
|
|
@@ -1754,6 +1761,8 @@
|
|
|
1754
1761
|
"CVE-2026-56291",
|
|
1755
1762
|
"CVE-2026-5760",
|
|
1756
1763
|
"CVE-2026-58644",
|
|
1764
|
+
"CVE-2026-60137",
|
|
1765
|
+
"CVE-2026-63030",
|
|
1757
1766
|
"CVE-2026-6973",
|
|
1758
1767
|
"CVE-2026-7473",
|
|
1759
1768
|
"CVE-2026-7482",
|
|
@@ -2089,7 +2098,8 @@
|
|
|
2089
2098
|
"CVE-2026-20133",
|
|
2090
2099
|
"CVE-2026-21858",
|
|
2091
2100
|
"CVE-2026-22218",
|
|
2092
|
-
"CVE-2026-41950"
|
|
2101
|
+
"CVE-2026-41950",
|
|
2102
|
+
"CVE-2026-60137"
|
|
2093
2103
|
]
|
|
2094
2104
|
},
|
|
2095
2105
|
"T1485": {
|
|
@@ -2427,6 +2437,7 @@
|
|
|
2427
2437
|
"CVE-2024-48248",
|
|
2428
2438
|
"CVE-2024-6587",
|
|
2429
2439
|
"CVE-2025-21085",
|
|
2440
|
+
"CVE-2026-0770",
|
|
2430
2441
|
"CVE-2026-30615",
|
|
2431
2442
|
"MAL-2026-3083",
|
|
2432
2443
|
"MAL-2026-MOIKA-DEPCONFUSION",
|
|
@@ -2487,6 +2498,9 @@
|
|
|
2487
2498
|
"description": "Adversaries may attempt to access the Cloud Instance Metadata API to collect credentials and other sensitive data.",
|
|
2488
2499
|
"tactic": [
|
|
2489
2500
|
"Credential Access"
|
|
2501
|
+
],
|
|
2502
|
+
"cve_refs": [
|
|
2503
|
+
"CVE-2026-0770"
|
|
2490
2504
|
]
|
|
2491
2505
|
},
|
|
2492
2506
|
"T1552.007": {
|
|
@@ -3482,6 +3496,7 @@
|
|
|
3482
3496
|
"name": "Network Denial of Service",
|
|
3483
3497
|
"version": "v19",
|
|
3484
3498
|
"cve_refs": [
|
|
3499
|
+
"CVE-2021-27137",
|
|
3485
3500
|
"CVE-2023-44487",
|
|
3486
3501
|
"CVE-2023-50387",
|
|
3487
3502
|
"CVE-2023-50868",
|
|
@@ -5429,6 +5444,7 @@
|
|
|
5429
5444
|
"is_subtechnique": false,
|
|
5430
5445
|
"cve_refs": [
|
|
5431
5446
|
"CVE-2008-4250",
|
|
5447
|
+
"CVE-2021-27137",
|
|
5432
5448
|
"CVE-2023-34048",
|
|
5433
5449
|
"CVE-2024-12356",
|
|
5434
5450
|
"CVE-2024-38812",
|
|
@@ -13044,7 +13060,8 @@
|
|
|
13044
13060
|
"CVE-2026-48939",
|
|
13045
13061
|
"CVE-2026-56290",
|
|
13046
13062
|
"CVE-2026-56291",
|
|
13047
|
-
"CVE-2026-58644"
|
|
13063
|
+
"CVE-2026-58644",
|
|
13064
|
+
"CVE-2026-63030"
|
|
13048
13065
|
]
|
|
13049
13066
|
},
|
|
13050
13067
|
"T1505.004": {
|