@blamejs/exceptd-skills 0.18.26 → 0.18.27

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (15) hide show
  1. package/CHANGELOG.md +4 -0
  2. package/README.md +1 -1
  3. package/data/_indexes/_meta.json +10 -10
  4. package/data/_indexes/activity-feed.json +11 -11
  5. package/data/_indexes/catalog-summaries.json +10 -10
  6. package/data/_indexes/chains.json +60141 -310
  7. package/data/_indexes/frequency.json +2 -0
  8. package/data/attack-techniques.json +209 -5
  9. package/data/cve-catalog.json +11157 -4
  10. package/data/cwe-catalog.json +174 -3
  11. package/data/framework-control-gaps.json +500 -0
  12. package/data/zeroday-lessons.json +6101 -1
  13. package/manifest.json +53 -53
  14. package/package.json +2 -2
  15. package/sbom.cdx.json +25 -25
package/data/_indexes/frequency.json CHANGED
@@ -3196,6 +3196,7 @@
3196
3196
  "CWE-282",
3197
3197
  "CWE-285",
3198
3198
  "CWE-288",
3199
+ "CWE-294",
3199
3200
  "CWE-295",
3200
3201
  "CWE-303",
3201
3202
  "CWE-305",
@@ -3222,6 +3223,7 @@
3222
3223
  "CWE-384",
3223
3224
  "CWE-385",
3224
3225
  "CWE-399",
3226
+ "CWE-401",
3225
3227
  "CWE-404",
3226
3228
  "CWE-415",
3227
3229
  "CWE-420",
package/data/attack-techniques.json CHANGED
@@ -290,6 +290,7 @@
290
290
  "CVE-2016-20017",
291
291
  "CVE-2016-3714",
292
292
  "CVE-2017-1000353",
293
+ "CVE-2017-18368",
293
294
  "CVE-2017-3066",
294
295
  "CVE-2017-3506",
295
296
  "CVE-2017-6884",
@@ -300,10 +301,13 @@
300
301
  "CVE-2019-0344",
301
302
  "CVE-2019-11001",
302
303
  "CVE-2019-16278",
304
+ "CVE-2019-17621",
305
+ "CVE-2019-20500",
303
306
  "CVE-2019-7256",
304
307
  "CVE-2019-9874",
305
308
  "CVE-2019-9875",
306
309
  "CVE-2020-0618",
310
+ "CVE-2020-12641",
307
311
  "CVE-2020-13965",
308
312
  "CVE-2020-14644",
309
313
  "CVE-2020-15069",
@@ -316,18 +320,32 @@
316
320
  "CVE-2021-31196",
317
321
  "CVE-2021-3129",
318
322
  "CVE-2021-36380",
323
+ "CVE-2021-39144",
319
324
  "CVE-2021-40407",
320
325
  "CVE-2021-44529",
326
+ "CVE-2021-45046",
321
327
  "CVE-2022-1471",
322
328
  "CVE-2022-21445",
323
329
  "CVE-2022-24816",
330
+ "CVE-2022-29303",
331
+ "CVE-2022-31199",
332
+ "CVE-2022-39197",
333
+ "CVE-2022-41328",
324
334
  "CVE-2022-43769",
335
+ "CVE-2023-1389",
325
336
  "CVE-2023-1671",
326
337
  "CVE-2023-20118",
327
338
  "CVE-2023-20273",
339
+ "CVE-2023-20867",
340
+ "CVE-2023-20887",
328
341
  "CVE-2023-22527",
329
342
  "CVE-2023-24955",
330
343
  "CVE-2023-25280",
344
+ "CVE-2023-26360",
345
+ "CVE-2023-27350",
346
+ "CVE-2023-27992",
347
+ "CVE-2023-2868",
348
+ "CVE-2023-28771",
331
349
  "CVE-2023-29300",
332
350
  "CVE-2023-33246",
333
351
  "CVE-2023-33538",
@@ -495,6 +513,7 @@
495
513
  "CVE-2026-1281",
496
514
  "CVE-2026-1340",
497
515
  "CVE-2026-15410",
516
+ "CVE-2026-16812",
498
517
  "CVE-2026-1731",
499
518
  "CVE-2026-20045",
500
519
  "CVE-2026-20245",
@@ -537,6 +556,7 @@
537
556
  "CVE-2026-45829",
538
557
  "CVE-2026-48172",
539
558
  "CVE-2026-48282",
559
+ "CVE-2026-50522",
540
560
  "CVE-2026-5760",
541
561
  "CVE-2026-58644",
542
562
  "CVE-2026-63030",
@@ -615,7 +635,10 @@
615
635
  "name": "Command and Scripting Interpreter: JavaScript",
616
636
  "version": "v19",
617
637
  "cve_refs": [
638
+ "CVE-2020-35730",
618
639
  "CVE-2021-26829",
640
+ "CVE-2022-27926",
641
+ "CVE-2023-37580",
619
642
  "CVE-2023-6571",
620
643
  "CVE-2024-11182",
621
644
  "CVE-2024-27132",
@@ -653,25 +676,49 @@
653
676
  "version": "v19",
654
677
  "cve_refs": [
655
678
  "BUG-2026-NIGHTMARE-ECLIPSE-GREENPLASMA",
679
+ "CVE-2010-3904",
680
+ "CVE-2014-0196",
681
+ "CVE-2016-0165",
656
682
  "CVE-2017-1000253",
657
683
  "CVE-2018-0824",
658
684
  "CVE-2018-14634",
659
685
  "CVE-2018-8639",
686
+ "CVE-2019-1388",
687
+ "CVE-2019-8526",
660
688
  "CVE-2020-17103-REREGRESSION-2026",
661
689
  "CVE-2021-22555",
690
+ "CVE-2021-25371",
691
+ "CVE-2021-25372",
692
+ "CVE-2021-25394",
693
+ "CVE-2021-25395",
694
+ "CVE-2021-25487",
695
+ "CVE-2021-29256",
696
+ "CVE-2021-30900",
662
697
  "CVE-2021-30952",
698
+ "CVE-2021-3560",
663
699
  "CVE-2021-43226",
664
700
  "CVE-2022-0185",
665
701
  "CVE-2022-0492",
666
702
  "CVE-2022-22071",
667
703
  "CVE-2022-22265",
704
+ "CVE-2022-22706",
668
705
  "CVE-2022-2586",
669
706
  "CVE-2022-38028",
707
+ "CVE-2022-38181",
670
708
  "CVE-2022-48618",
709
+ "CVE-2023-0266",
671
710
  "CVE-2023-0386",
711
+ "CVE-2023-20963",
672
712
  "CVE-2023-25280",
713
+ "CVE-2023-26083",
714
+ "CVE-2023-28206",
673
715
  "CVE-2023-28229",
716
+ "CVE-2023-28252",
717
+ "CVE-2023-29336",
674
718
  "CVE-2023-29360",
719
+ "CVE-2023-32046",
720
+ "CVE-2023-32409",
721
+ "CVE-2023-32434",
675
722
  "CVE-2023-33063",
676
723
  "CVE-2023-33106",
677
724
  "CVE-2023-33107",
@@ -680,6 +727,8 @@
680
727
  "CVE-2023-36036",
681
728
  "CVE-2023-36424",
682
729
  "CVE-2023-36802",
730
+ "CVE-2023-36874",
731
+ "CVE-2023-38606",
683
732
  "CVE-2023-41974",
684
733
  "CVE-2023-41992",
685
734
  "CVE-2023-4211",
@@ -828,11 +877,13 @@
828
877
  "CVE-2018-9276",
829
878
  "CVE-2019-11001",
830
879
  "CVE-2019-19006",
880
+ "CVE-2019-20500",
831
881
  "CVE-2019-6693",
832
882
  "CVE-2020-10148",
833
883
  "CVE-2020-24363",
834
884
  "CVE-2020-29574",
835
885
  "CVE-2021-20035",
886
+ "CVE-2021-27876",
836
887
  "CVE-2021-32030",
837
888
  "CVE-2021-33044",
838
889
  "CVE-2021-33045",
@@ -848,6 +899,7 @@
848
899
  "CVE-2023-22518",
849
900
  "CVE-2023-27351",
850
901
  "CVE-2023-27524",
902
+ "CVE-2023-27532",
851
903
  "CVE-2023-28434",
852
904
  "CVE-2023-29357",
853
905
  "CVE-2023-35082",
@@ -923,6 +975,7 @@
923
975
  "CVE-2025-69286",
924
976
  "CVE-2026-0257",
925
977
  "CVE-2026-1603",
978
+ "CVE-2026-16232",
926
979
  "CVE-2026-20127",
927
980
  "CVE-2026-20182",
928
981
  "CVE-2026-20253",
@@ -1206,6 +1259,7 @@
1206
1259
  "name": "External Remote Services",
1207
1260
  "version": "v19",
1208
1261
  "cve_refs": [
1262
+ "CVE-2023-27997",
1209
1263
  "CVE-2024-21762",
1210
1264
  "CVE-2025-0282",
1211
1265
  "CVE-2025-22457",
@@ -1267,16 +1321,23 @@
1267
1321
  "CVE-2014-3931",
1268
1322
  "CVE-2014-6278",
1269
1323
  "CVE-2014-8361",
1324
+ "CVE-2015-5317",
1270
1325
  "CVE-2015-7755",
1271
1326
  "CVE-2016-10033",
1272
1327
  "CVE-2016-20017",
1328
+ "CVE-2016-3427",
1273
1329
  "CVE-2016-3714",
1330
+ "CVE-2016-6415",
1274
1331
  "CVE-2016-7836",
1332
+ "CVE-2016-8735",
1275
1333
  "CVE-2017-1000353",
1276
1334
  "CVE-2017-12637",
1335
+ "CVE-2017-18368",
1277
1336
  "CVE-2017-3066",
1278
1337
  "CVE-2017-3506",
1338
+ "CVE-2017-6742",
1279
1339
  "CVE-2017-6884",
1340
+ "CVE-2017-7494",
1280
1341
  "CVE-2017-7921",
1281
1342
  "CVE-2018-14667",
1282
1343
  "CVE-2018-14933",
@@ -1287,7 +1348,9 @@
1287
1348
  "CVE-2019-0344",
1288
1349
  "CVE-2019-11001",
1289
1350
  "CVE-2019-16278",
1351
+ "CVE-2019-17621",
1290
1352
  "CVE-2019-19006",
1353
+ "CVE-2019-20500",
1291
1354
  "CVE-2019-5418",
1292
1355
  "CVE-2019-6693",
1293
1356
  "CVE-2019-7256",
@@ -1297,6 +1360,7 @@
1297
1360
  "CVE-2020-0618",
1298
1361
  "CVE-2020-10148",
1299
1362
  "CVE-2020-11023",
1363
+ "CVE-2020-12641",
1300
1364
  "CVE-2020-13965",
1301
1365
  "CVE-2020-14644",
1302
1366
  "CVE-2020-15069",
@@ -1309,6 +1373,7 @@
1309
1373
  "CVE-2020-2883",
1310
1374
  "CVE-2020-29574",
1311
1375
  "CVE-2020-3259",
1376
+ "CVE-2020-35730",
1312
1377
  "CVE-2020-7796",
1313
1378
  "CVE-2021-20035",
1314
1379
  "CVE-2021-20123",
@@ -1321,53 +1386,85 @@
1321
1386
  "CVE-2021-26828",
1322
1387
  "CVE-2021-26829",
1323
1388
  "CVE-2021-27137",
1389
+ "CVE-2021-27876",
1390
+ "CVE-2021-27877",
1391
+ "CVE-2021-27878",
1324
1392
  "CVE-2021-31196",
1325
1393
  "CVE-2021-3129",
1326
1394
  "CVE-2021-32030",
1327
1395
  "CVE-2021-33044",
1328
1396
  "CVE-2021-33045",
1329
1397
  "CVE-2021-36380",
1398
+ "CVE-2021-39144",
1330
1399
  "CVE-2021-39935",
1331
1400
  "CVE-2021-40407",
1332
1401
  "CVE-2021-40655",
1333
1402
  "CVE-2021-41277",
1334
1403
  "CVE-2021-43798",
1404
+ "CVE-2021-44026",
1335
1405
  "CVE-2021-44207",
1336
1406
  "CVE-2021-44529",
1407
+ "CVE-2021-45046",
1337
1408
  "CVE-2022-1471",
1338
1409
  "CVE-2022-20775",
1339
1410
  "CVE-2022-21445",
1340
1411
  "CVE-2022-23227",
1341
1412
  "CVE-2022-24816",
1413
+ "CVE-2022-27926",
1414
+ "CVE-2022-29303",
1415
+ "CVE-2022-31199",
1342
1416
  "CVE-2022-36551",
1343
1417
  "CVE-2022-37055",
1418
+ "CVE-2022-39197",
1344
1419
  "CVE-2022-40799",
1345
1420
  "CVE-2022-43769",
1346
1421
  "CVE-2022-43939",
1422
+ "CVE-2023-1389",
1347
1423
  "CVE-2023-1671",
1348
1424
  "CVE-2023-20109",
1349
1425
  "CVE-2023-20118",
1350
1426
  "CVE-2023-20198",
1351
1427
  "CVE-2023-20269",
1352
1428
  "CVE-2023-20273",
1429
+ "CVE-2023-20887",
1353
1430
  "CVE-2023-21529",
1431
+ "CVE-2023-21839",
1354
1432
  "CVE-2023-22515",
1355
1433
  "CVE-2023-22518",
1356
1434
  "CVE-2023-22527",
1357
1435
  "CVE-2023-23752",
1436
+ "CVE-2023-24489",
1358
1437
  "CVE-2023-24955",
1359
1438
  "CVE-2023-25280",
1360
1439
  "CVE-2023-2533",
1440
+ "CVE-2023-25717",
1441
+ "CVE-2023-26359",
1442
+ "CVE-2023-26360",
1443
+ "CVE-2023-27350",
1361
1444
  "CVE-2023-27351",
1362
1445
  "CVE-2023-27524",
1446
+ "CVE-2023-27532",
1447
+ "CVE-2023-27992",
1448
+ "CVE-2023-27997",
1449
+ "CVE-2023-28432",
1363
1450
  "CVE-2023-28434",
1364
1451
  "CVE-2023-28461",
1452
+ "CVE-2023-2868",
1453
+ "CVE-2023-28771",
1454
+ "CVE-2023-29298",
1365
1455
  "CVE-2023-29300",
1366
1456
  "CVE-2023-29357",
1457
+ "CVE-2023-29492",
1367
1458
  "CVE-2023-29552",
1459
+ "CVE-2023-32315",
1460
+ "CVE-2023-33009",
1461
+ "CVE-2023-33010",
1368
1462
  "CVE-2023-33246",
1369
1463
  "CVE-2023-33538",
1370
1464
  "CVE-2023-34048",
1465
+ "CVE-2023-34362",
1466
+ "CVE-2023-35078",
1467
+ "CVE-2023-35081",
1371
1468
  "CVE-2023-35082",
1372
1469
  "CVE-2023-3519",
1373
1470
  "CVE-2023-36844",
@@ -1375,7 +1472,11 @@
1375
1472
  "CVE-2023-36846",
1376
1473
  "CVE-2023-36847",
1377
1474
  "CVE-2023-36851",
1475
+ "CVE-2023-37580",
1476
+ "CVE-2023-38035",
1477
+ "CVE-2023-38180",
1378
1478
  "CVE-2023-38203",
1479
+ "CVE-2023-38205",
1379
1480
  "CVE-2023-38950",
1380
1481
  "CVE-2023-39780",
1381
1482
  "CVE-2023-40044",
@@ -1663,6 +1764,7 @@
1663
1764
  "CVE-2025-68613",
1664
1765
  "CVE-2025-68645",
1665
1766
  "CVE-2025-68668",
1767
+ "CVE-2025-68686",
1666
1768
  "CVE-2025-69286",
1667
1769
  "CVE-2025-6965",
1668
1770
  "CVE-2025-7775",
@@ -1682,6 +1784,8 @@
1682
1784
  "CVE-2026-15409",
1683
1785
  "CVE-2026-15410",
1684
1786
  "CVE-2026-1603",
1787
+ "CVE-2026-16232",
1788
+ "CVE-2026-16812",
1685
1789
  "CVE-2026-1731",
1686
1790
  "CVE-2026-20045",
1687
1791
  "CVE-2026-20122",
@@ -1754,6 +1858,7 @@
1754
1858
  "CVE-2026-48907",
1755
1859
  "CVE-2026-48908",
1756
1860
  "CVE-2026-48939",
1861
+ "CVE-2026-50522",
1757
1862
  "CVE-2026-50751",
1758
1863
  "CVE-2026-55255",
1759
1864
  "CVE-2026-56164",
@@ -1936,16 +2041,36 @@
1936
2041
  "CVE-2012-4792",
1937
2042
  "CVE-2013-0643",
1938
2043
  "CVE-2013-0648",
2044
+ "CVE-2013-3163",
1939
2045
  "CVE-2013-3893",
1940
2046
  "CVE-2013-3918",
1941
2047
  "CVE-2014-0497",
1942
2048
  "CVE-2014-0502",
2049
+ "CVE-2016-9079",
1943
2050
  "CVE-2018-0824",
1944
2051
  "CVE-2020-9715",
2052
+ "CVE-2021-30900",
1945
2053
  "CVE-2021-30952",
2054
+ "CVE-2022-3038",
2055
+ "CVE-2022-38181",
2056
+ "CVE-2022-42948",
1946
2057
  "CVE-2022-48503",
2058
+ "CVE-2023-2033",
2059
+ "CVE-2023-2136",
1947
2060
  "CVE-2023-21608",
1948
2061
  "CVE-2023-26369",
2062
+ "CVE-2023-28204",
2063
+ "CVE-2023-28205",
2064
+ "CVE-2023-28206",
2065
+ "CVE-2023-3079",
2066
+ "CVE-2023-32046",
2067
+ "CVE-2023-32373",
2068
+ "CVE-2023-32409",
2069
+ "CVE-2023-32434",
2070
+ "CVE-2023-32435",
2071
+ "CVE-2023-32439",
2072
+ "CVE-2023-36884",
2073
+ "CVE-2023-37450",
1949
2074
  "CVE-2023-38831",
1950
2075
  "CVE-2023-41061",
1951
2076
  "CVE-2023-41064",
@@ -2049,6 +2174,7 @@
2049
2174
  "name": "Exploitation for Credential Access",
2050
2175
  "version": "v19",
2051
2176
  "cve_refs": [
2177
+ "CVE-2023-23397",
2052
2178
  "CVE-2023-43791",
2053
2179
  "CVE-2024-21182",
2054
2180
  "CVE-2024-53197",
@@ -2094,6 +2220,9 @@
2094
2220
  "Collection"
2095
2221
  ],
2096
2222
  "cve_refs": [
2223
+ "CVE-2015-5317",
2224
+ "CVE-2021-44026",
2225
+ "CVE-2023-35078",
2097
2226
  "CVE-2024-12450",
2098
2227
  "CVE-2026-20133",
2099
2228
  "CVE-2026-21858",
@@ -2149,6 +2278,7 @@
2149
2278
  "last_verified": "2026-05-19",
2150
2279
  "description": "Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.",
2151
2280
  "cve_refs": [
2281
+ "CVE-2023-28252",
2152
2282
  "CVE-2025-29824"
2153
2283
  ]
2154
2284
  },
@@ -2365,6 +2495,7 @@
2365
2495
  "name": "Unsecured Credentials",
2366
2496
  "version": "v19",
2367
2497
  "cve_refs": [
2498
+ "CVE-2016-6415",
2368
2499
  "CVE-2018-15133",
2369
2500
  "CVE-2019-5418",
2370
2501
  "CVE-2021-22681",
@@ -2374,6 +2505,8 @@
2374
2505
  "CVE-2022-22948",
2375
2506
  "CVE-2023-23752",
2376
2507
  "CVE-2023-27524",
2508
+ "CVE-2023-27532",
2509
+ "CVE-2023-28432",
2377
2510
  "CVE-2023-38950",
2378
2511
  "CVE-2023-47117",
2379
2512
  "CVE-2023-49103",
@@ -2589,6 +2722,7 @@
2589
2722
  "last_verified": "2026-05-19",
2590
2723
  "description": "Adversaries may modify authentication mechanisms and processes to access user credentials or enable otherwise unwarranted access to accounts.",
2591
2724
  "cve_refs": [
2725
+ "CVE-2023-20867",
2592
2726
  "CVE-2024-12776",
2593
2727
  "CVE-2025-24472"
2594
2728
  ]
@@ -2697,6 +2831,8 @@
2697
2831
  "name": "Phishing",
2698
2832
  "version": "v19",
2699
2833
  "cve_refs": [
2834
+ "CVE-2020-35730",
2835
+ "CVE-2023-35311",
2700
2836
  "CVE-2026-32202",
2701
2837
  "CVE-2026-42897"
2702
2838
  ],
@@ -2734,6 +2870,9 @@
2734
2870
  "description": "Adversaries may send spearphishing emails with a malicious attachment in an attempt to gain access to victim systems.",
2735
2871
  "tactic": [
2736
2872
  "Initial Access"
2873
+ ],
2874
+ "cve_refs": [
2875
+ "CVE-2023-36884"
2737
2876
  ]
2738
2877
  },
2739
2878
  "T1566.002": {
@@ -2755,6 +2894,9 @@
2755
2894
  "description": "Adversaries may send spearphishing emails with a malicious link in an attempt to gain access to victim systems.",
2756
2895
  "tactic": [
2757
2896
  "Initial Access"
2897
+ ],
2898
+ "cve_refs": [
2899
+ "CVE-2023-37580"
2758
2900
  ]
2759
2901
  },
2760
2902
  "T1566.003": {
@@ -3398,6 +3540,7 @@
3398
3540
  "name": "Data from Local System",
3399
3541
  "version": "v19",
3400
3542
  "cve_refs": [
3543
+ "CVE-2021-27876",
3401
3544
  "CVE-2021-41277",
3402
3545
  "CVE-2023-21237",
3403
3546
  "CVE-2023-36424",
@@ -3415,6 +3558,7 @@
3415
3558
  "CVE-2025-48633",
3416
3559
  "CVE-2025-5419",
3417
3560
  "CVE-2025-5777",
3561
+ "CVE-2025-68686",
3418
3562
  "CVE-2026-20805",
3419
3563
  "CVE-2026-3055",
3420
3564
  "CVE-2026-7482"
@@ -3440,7 +3584,19 @@
3440
3584
  "name": "Drive-by Compromise",
3441
3585
  "version": "v19",
3442
3586
  "cve_refs": [
3587
+ "CVE-2013-3163",
3588
+ "CVE-2016-9079",
3589
+ "CVE-2022-3038",
3590
+ "CVE-2023-2033",
3591
+ "CVE-2023-28204",
3592
+ "CVE-2023-28205",
3593
+ "CVE-2023-3079",
3594
+ "CVE-2023-32373",
3595
+ "CVE-2023-32409",
3596
+ "CVE-2023-32435",
3597
+ "CVE-2023-32439",
3443
3598
  "CVE-2023-34192",
3599
+ "CVE-2023-37450",
3444
3600
  "CVE-2023-6571",
3445
3601
  "CVE-2024-27132",
3446
3602
  "CVE-2025-10585",
@@ -3726,8 +3882,13 @@
3726
3882
  "last_verified": "2026-05-19",
3727
3883
  "notes": "Added v0.13.17 to support DoS-class KEV bulk imports.",
3728
3884
  "cve_refs": [
3885
+ "CVE-2004-1464",
3886
+ "CVE-2021-25489",
3729
3887
  "CVE-2023-20109",
3730
3888
  "CVE-2023-29552",
3889
+ "CVE-2023-33009",
3890
+ "CVE-2023-33010",
3891
+ "CVE-2023-38180",
3731
3892
  "CVE-2023-4346",
3732
3893
  "CVE-2023-50387",
3733
3894
  "CVE-2023-50868",
@@ -4128,6 +4289,7 @@
4128
4289
  "stix_id": "attack-pattern--42e8de7b-37b2-4258-905a-6897815e58e0",
4129
4290
  "is_subtechnique": false,
4130
4291
  "cve_refs": [
4292
+ "CVE-2023-36874",
4131
4293
  "CVE-2025-26633"
4132
4294
  ]
4133
4295
  },
@@ -5070,7 +5232,10 @@
5070
5232
  "Windows"
5071
5233
  ],
5072
5234
  "stix_id": "attack-pattern--dcaa092b-7de9-4a21-977f-7fcb77e89c48",
5073
- "is_subtechnique": false
5235
+ "is_subtechnique": false,
5236
+ "cve_refs": [
5237
+ "CVE-2023-29336"
5238
+ ]
5074
5239
  },
5075
5240
  "T1135": {
5076
5241
  "id": "T1135",
@@ -5237,6 +5402,7 @@
5237
5402
  "stix_id": "attack-pattern--b77cf5f3-6060-475d-bd60-40ccbf28fdc2",
5238
5403
  "is_subtechnique": false,
5239
5404
  "cve_refs": [
5405
+ "CVE-2023-23397",
5240
5406
  "CVE-2023-36563",
5241
5407
  "CVE-2023-36761",
5242
5408
  "CVE-2024-13159",
@@ -5361,6 +5527,8 @@
5361
5527
  "stix_id": "attack-pattern--8c32eb4d-805f-4fc5-bf60-c4d476c131b5",
5362
5528
  "is_subtechnique": false,
5363
5529
  "cve_refs": [
5530
+ "CVE-2023-32046",
5531
+ "CVE-2023-35311",
5364
5532
  "CVE-2024-0129",
5365
5533
  "CVE-2024-11392",
5366
5534
  "CVE-2024-11393",
@@ -5444,7 +5612,14 @@
5444
5612
  "is_subtechnique": false,
5445
5613
  "cve_refs": [
5446
5614
  "CVE-2008-4250",
5615
+ "CVE-2016-3427",
5616
+ "CVE-2016-8735",
5617
+ "CVE-2017-6742",
5618
+ "CVE-2017-7494",
5447
5619
  "CVE-2021-27137",
5620
+ "CVE-2021-27877",
5621
+ "CVE-2021-27878",
5622
+ "CVE-2023-21839",
5448
5623
  "CVE-2023-34048",
5449
5624
  "CVE-2024-12356",
5450
5625
  "CVE-2024-38812",
@@ -5476,6 +5651,9 @@
5476
5651
  "cve_refs": [
5477
5652
  "CVE-2013-0643",
5478
5653
  "CVE-2022-48618",
5654
+ "CVE-2023-2136",
5655
+ "CVE-2023-21492",
5656
+ "CVE-2023-29298",
5479
5657
  "CVE-2023-36025",
5480
5658
  "CVE-2023-36584",
5481
5659
  "CVE-2023-41991",
@@ -6001,6 +6179,7 @@
6001
6179
  "stix_id": "attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b",
6002
6180
  "is_subtechnique": false,
6003
6181
  "cve_refs": [
6182
+ "CVE-2021-3560",
6004
6183
  "CVE-2026-48172"
6005
6184
  ]
6006
6185
  },
@@ -7033,7 +7212,10 @@
7033
7212
  "stix_id": "attack-pattern--866d0d6d-02c6-42bd-aa2f-02907fdc0969",
7034
7213
  "last_verified": "2026-05-19",
7035
7214
  "_auto_imported": true,
7036
- "_intake_method": "mitre-attack-stix"
7215
+ "_intake_method": "mitre-attack-stix",
7216
+ "cve_refs": [
7217
+ "CVE-2023-21492"
7218
+ ]
7037
7219
  },
7038
7220
  "T1659": {
7039
7221
  "id": "T1659",
@@ -11604,7 +11786,10 @@
11604
11786
  "stix_id": "attack-pattern--ef67e13e-5598-4adc-bdb2-998225874fa9",
11605
11787
  "last_verified": "2026-05-19",
11606
11788
  "_auto_imported": true,
11607
- "_intake_method": "mitre-attack-stix"
11789
+ "_intake_method": "mitre-attack-stix",
11790
+ "cve_refs": [
11791
+ "CVE-2022-27926"
11792
+ ]
11608
11793
  },
11609
11794
  "T1204.002": {
11610
11795
  "id": "T1204.002",
@@ -11634,6 +11819,8 @@
11634
11819
  "_intake_method": "mitre-attack-stix",
11635
11820
  "cve_refs": [
11636
11821
  "CVE-2022-23748",
11822
+ "CVE-2023-24880",
11823
+ "CVE-2023-32049",
11637
11824
  "CVE-2025-0411",
11638
11825
  "CVE-2025-24985",
11639
11826
  "CVE-2025-24991",
@@ -13022,10 +13209,16 @@
13022
13209
  "CVE-2020-14644",
13023
13210
  "CVE-2021-26828",
13024
13211
  "CVE-2021-31196",
13212
+ "CVE-2023-24489",
13213
+ "CVE-2023-26359",
13025
13214
  "CVE-2023-28461",
13215
+ "CVE-2023-32315",
13216
+ "CVE-2023-34362",
13217
+ "CVE-2023-35081",
13026
13218
  "CVE-2023-36846",
13027
13219
  "CVE-2023-36847",
13028
13220
  "CVE-2023-36851",
13221
+ "CVE-2023-38035",
13029
13222
  "CVE-2023-47246",
13030
13223
  "CVE-2024-0012",
13031
13224
  "CVE-2024-11680",
@@ -13058,6 +13251,7 @@
13058
13251
  "CVE-2026-48907",
13059
13252
  "CVE-2026-48908",
13060
13253
  "CVE-2026-48939",
13254
+ "CVE-2026-50522",
13061
13255
  "CVE-2026-56290",
13062
13256
  "CVE-2026-56291",
13063
13257
  "CVE-2026-58644",
@@ -14324,7 +14518,10 @@
14324
14518
  "stix_id": "attack-pattern--120d5519-3098-4e1c-9191-2aa61232f073",
14325
14519
  "last_verified": "2026-05-19",
14326
14520
  "_auto_imported": true,
14327
- "_intake_method": "mitre-attack-stix"
14521
+ "_intake_method": "mitre-attack-stix",
14522
+ "cve_refs": [
14523
+ "CVE-2019-1388"
14524
+ ]
14328
14525
  },
14329
14526
  "T1548.004": {
14330
14527
  "id": "T1548.004",
@@ -14743,6 +14940,9 @@
14743
14940
  "_auto_imported": true,
14744
14941
  "_intake_method": "mitre-attack-stix",
14745
14942
  "cve_refs": [
14943
+ "CVE-2023-24880",
14944
+ "CVE-2023-32049",
14945
+ "CVE-2023-36884",
14746
14946
  "CVE-2026-21510",
14747
14947
  "CVE-2026-21513"
14748
14948
  ]
@@ -15178,6 +15378,7 @@
15178
15378
  "_auto_imported": true,
15179
15379
  "_intake_method": "mitre-attack-stix",
15180
15380
  "cve_refs": [
15381
+ "CVE-2023-23397",
15181
15382
  "CVE-2025-33073"
15182
15383
  ]
15183
15384
  },
@@ -18637,7 +18838,10 @@
18637
18838
  "stix_id": "attack-pattern--d245808a-7086-4310-984a-a84aaaa43f8f",
18638
18839
  "last_verified": "2026-05-19",
18639
18840
  "_auto_imported": true,
18640
- "_intake_method": "mitre-attack-stix"
18841
+ "_intake_method": "mitre-attack-stix",
18842
+ "cve_refs": [
18843
+ "CVE-2022-41328"
18844
+ ]
18641
18845
  },
18642
18846
  "T1601.002": {
18643
18847
  "id": "T1601.002",