@blamejs/exceptd-skills 0.19.14 → 0.19.15
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +12 -0
- package/data/_indexes/_meta.json +3 -3
- package/data/zeroday-lessons.json +949 -35
- package/manifest.json +53 -53
- package/package.json +1 -1
- package/sbom.cdx.json +17 -17
- package/scripts/release.js +26 -5
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,17 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## 0.19.15 — 2026-08-10
|
|
4
|
+
|
|
5
|
+
Another 35 CVEs report the controls they require, taking coverage to 713 of 1025. The set includes HPE OneView, the Windows CLFS driver, SharePoint, Outlook, Adobe ColdFusion, Citrix Session Recording, and the Cisco and D-Link router entries.
|
|
6
|
+
|
|
7
|
+
Infrastructure-management appliances get a clock of their own. HPE OneView is normally inventoried as the tool an estate patches its servers with rather than as an asset that needs patching, which is how a pre-authentication flaw on it rides the next infrastructure window while the operating-system attestation reads clean. The requirement runs the appliance's own update on the listing clock rather than the cadence of the updates it distributes, and names the restart as the step most likely to slip, because taking it interrupts the console operators depend on.
|
|
8
|
+
|
|
9
|
+
Where nothing can be disabled, the entry says so instead of reaching for a compensating control. The CLFS driver ships with Windows and the attacker is already an authorized local user, so there is no module to blacklist, no account model being abused, and no privilege tier that gets consulted — leaving an honestly measured remediation window and detection during it as the only two requirements the evidence supports.
|
|
10
|
+
|
|
11
|
+
Detection of the polkit D-Bus race moves to `NEW-CTRL-146` (USERSPACE-PRIVILEGED-DBUS-RACE-DETECTION). It had been filed under the kernel-exploitation detection control while describing userspace telemetry, so a report correlating by identifier would have counted kernel-detection coverage as covering polkit.
|
|
12
|
+
|
|
13
|
+
`release.js prepare` accepts `--with-content` for a release that intentionally ships uncommitted work. It previously refused any tree dirtier than the changelog entry, so such releases were run by hand — and a hand-run sequence is how the phase's own steps get skipped. The refusal is unchanged without the flag, and with it the carried paths are listed rather than silently included.
|
|
14
|
+
|
|
3
15
|
## 0.19.14 — 2026-08-10
|
|
4
16
|
|
|
5
17
|
Another 36 CVEs report the controls they require, taking coverage to 678 of 1025. The set includes Citrix Session Recording, Erlang/OTP SSH, FreePBX, Zimbra, Ubiquiti UniFi OS, Power Pages, Android Runtime, and the PowerPoint record-parser entry.
|
package/data/_indexes/_meta.json
CHANGED
|
@@ -1,10 +1,10 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schema_version": "1.1.0",
|
|
3
|
-
"generated_at": "2026-08-
|
|
3
|
+
"generated_at": "2026-08-10T21:48:36.855Z",
|
|
4
4
|
"generator": "scripts/build-indexes.js",
|
|
5
5
|
"source_count": 64,
|
|
6
6
|
"source_hashes": {
|
|
7
|
-
"manifest.json": "
|
|
7
|
+
"manifest.json": "4c5c2c21053de02ddf77f31292368776dea6376491aba48173b0a96864b20e75",
|
|
8
8
|
"README.md": "0fa9b167172f104810e5ee6040f11ed741217f7a51c2552a15c69d2a15a164aa",
|
|
9
9
|
"data/atlas-ttps.json": "a14089671efcb4f06dd0f82d688fe49276c1370e167e4483d76e9c0a40ef41eb",
|
|
10
10
|
"data/attack-techniques.json": "6bc0619bcccceccc8d5c12aefa6c11197c625e5d7313e70474f2831e271b23f0",
|
|
@@ -16,7 +16,7 @@
|
|
|
16
16
|
"data/framework-control-gaps.json": "a0a43cd0c8fff6ca753bb2c98f121922ff3de63102b7d67c86c76037e28cd553",
|
|
17
17
|
"data/global-frameworks.json": "20b18a851b3ab82e57cd159b49476d69fe544f02523398b2015189ab81c7c3f8",
|
|
18
18
|
"data/rfc-references.json": "6e9017eca910ab7e4bee85ad7c23927fd6ec766f34be7fce49ebf020cec3381a",
|
|
19
|
-
"data/zeroday-lessons.json": "
|
|
19
|
+
"data/zeroday-lessons.json": "fabc33c100e23088661fb5f4ee1f361180e7fa44134bfe1e5e4215af519dc904",
|
|
20
20
|
"skills/kernel-lpe-triage/skill.md": "0f79c641cef6e5f4a942eb94f43c460562bf83dfb67ae112d146c39c6b320fb0",
|
|
21
21
|
"skills/ai-attack-surface/skill.md": "c97335e14cd34bd1cd3c9d2cbd397f33569a07292b2f2f7721483575eb4459f7",
|
|
22
22
|
"skills/mcp-agent-trust/skill.md": "6195c93a6cadb213051214742890fa2bf4e39bae377a654d4195f0c90bd8b896",
|