npm - @blamejs/exceptd-skills - Versions diffs - 0.19.29 → 0.19.31 - Mend

@blamejs/exceptd-skills 0.19.29 → 0.19.31

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (16) hide show

package/CHANGELOG.md +24 -0
package/data/_indexes/_meta.json +8 -8
package/data/_indexes/activity-feed.json +14 -14
package/data/_indexes/catalog-summaries.json +12 -12
package/data/_indexes/chains.json +67236 -16
package/data/attack-techniques.json +298 -11
package/data/cve-catalog.json +11109 -96
package/data/cwe-catalog.json +117 -3
package/data/framework-control-gaps.json +639 -3
package/data/zeroday-lessons.json +9015 -2
package/lib/collectors/citation-hygiene.js +7 -1
package/lib/cve-batch.js +38 -0
package/lib/validate-package.js +5 -2
package/manifest.json +53 -53
package/package.json +2 -2
package/sbom.cdx.json +31 -31

package/data/attack-techniques.json CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "_meta": {
     "schema_version": "1.0.0",
-    "last_updated": "2026-08-18",
+    "last_updated": "2026-08-19",
     "last_threat_review": "2026-08-08",
     "attack_version": "19.2",
     "attack_version_date": "2026-08-05",
@@ -209,6 +209,7 @@
       "Privilege Escalation"
     ],
     "cve_refs": [
+      "CVE-2011-2005",
       "CVE-2015-0311",
       "CVE-2019-0880",
       "CVE-2024-35250"
@@ -224,18 +225,28 @@
     ],
     "cve_refs": [
       "CVE-2008-4128",
+      "CVE-2013-2251",
+      "CVE-2013-4810",
+      "CVE-2014-3120",
       "CVE-2014-3931",
       "CVE-2014-6278",
       "CVE-2014-8361",
+      "CVE-2016-0189",
+      "CVE-2016-0752",
       "CVE-2016-10033",
       "CVE-2016-20017",
       "CVE-2016-3714",
       "CVE-2016-6367",
       "CVE-2017-1000353",
+      "CVE-2017-12615",
+      "CVE-2017-12617",
       "CVE-2017-18368",
       "CVE-2017-3066",
       "CVE-2017-3506",
+      "CVE-2017-6316",
+      "CVE-2017-6334",
       "CVE-2017-6884",
+      "CVE-2018-1273",
       "CVE-2018-14667",
       "CVE-2018-14933",
       "CVE-2018-15133",
@@ -243,6 +254,7 @@
       "CVE-2019-0344",
       "CVE-2019-1003029",
       "CVE-2019-11001",
+      "CVE-2019-12989",
       "CVE-2019-15271",
       "CVE-2019-16278",
       "CVE-2019-17621",
@@ -445,6 +457,7 @@
       "CVE-2025-61882",
       "CVE-2025-61932",
       "CVE-2025-6204",
+      "CVE-2025-62593",
       "CVE-2025-64328",
       "CVE-2025-64496",
       "CVE-2025-66644",
@@ -538,6 +551,7 @@
     "cve_refs": [
       "CVE-2016-3393",
       "CVE-2018-20753",
+      "CVE-2019-1003030",
       "CVE-2022-30190",
       "CVE-2022-35405",
       "CVE-2022-41040",
@@ -564,6 +578,7 @@
     "version": "v19",
     "cve_refs": [
       "CVE-2020-5741",
+      "CVE-2022-26318",
       "CVE-2022-44877",
       "CVE-2023-44467",
       "CVE-2024-12366",
@@ -598,6 +613,7 @@
     "version": "v19",
     "cve_refs": [
       "CVE-2012-1889",
+      "CVE-2013-5223",
       "CVE-2018-17463",
       "CVE-2018-17480",
       "CVE-2018-19943",
@@ -646,10 +662,15 @@
       "BUG-2026-NIGHTMARE-ECLIPSE-GREENPLASMA",
       "CVE-2010-0840",
       "CVE-2010-3904",
+      "CVE-2010-4344",
+      "CVE-2010-4345",
+      "CVE-2010-4398",
       "CVE-2011-1823",
+      "CVE-2011-2005",
       "CVE-2013-2094",
       "CVE-2013-2596",
       "CVE-2013-2597",
+      "CVE-2013-3660",
       "CVE-2013-6282",
       "CVE-2014-0196",
       "CVE-2014-0546",
@@ -659,12 +680,16 @@
       "CVE-2014-4113",
       "CVE-2014-4123",
       "CVE-2014-4148",
+      "CVE-2014-6324",
       "CVE-2015-0016",
       "CVE-2015-1671",
       "CVE-2015-1769",
       "CVE-2015-2291",
       "CVE-2015-2360",
+      "CVE-2015-2426",
       "CVE-2015-6175",
+      "CVE-2016-0040",
+      "CVE-2016-0151",
       "CVE-2016-0165",
       "CVE-2016-3393",
       "CVE-2016-4655",
@@ -672,6 +697,7 @@
       "CVE-2016-6367",
       "CVE-2016-7256",
       "CVE-2017-0005",
+      "CVE-2017-0213",
       "CVE-2017-1000253",
       "CVE-2018-0824",
       "CVE-2018-14634",
@@ -681,14 +707,21 @@
       "CVE-2018-19323",
       "CVE-2018-4344",
       "CVE-2018-4990",
+      "CVE-2018-8405",
+      "CVE-2018-8406",
+      "CVE-2018-8440",
       "CVE-2018-8589",
       "CVE-2018-8611",
       "CVE-2018-8639",
       "CVE-2019-0703",
       "CVE-2019-0880",
       "CVE-2019-1130",
+      "CVE-2019-1253",
+      "CVE-2019-1315",
+      "CVE-2019-1322",
       "CVE-2019-1385",
       "CVE-2019-1388",
+      "CVE-2019-1405",
       "CVE-2019-3010",
       "CVE-2019-5786",
       "CVE-2019-7286",
@@ -701,6 +734,7 @@
       "CVE-2020-3153",
       "CVE-2020-3433",
       "CVE-2020-3837",
+      "CVE-2020-9054",
       "CVE-2020-9907",
       "CVE-2021-0920",
       "CVE-2021-1048",
@@ -735,9 +769,12 @@
       "CVE-2022-0185",
       "CVE-2022-0492",
       "CVE-2022-0847",
+      "CVE-2022-21919",
+      "CVE-2022-21999",
       "CVE-2022-22047",
       "CVE-2022-22071",
       "CVE-2022-22265",
+      "CVE-2022-22674",
       "CVE-2022-22675",
       "CVE-2022-22706",
       "CVE-2022-22718",
@@ -934,6 +971,7 @@
       "CVE-2013-3993",
       "CVE-2014-0160",
       "CVE-2015-7755",
+      "CVE-2016-11021",
       "CVE-2016-6367",
       "CVE-2016-7836",
       "CVE-2017-5521",
@@ -943,13 +981,17 @@
       "CVE-2018-9276",
       "CVE-2019-0703",
       "CVE-2019-1003029",
+      "CVE-2019-1003030",
       "CVE-2019-11001",
       "CVE-2019-19006",
       "CVE-2019-20500",
       "CVE-2019-6693",
       "CVE-2020-10148",
+      "CVE-2020-2021",
       "CVE-2020-24363",
+      "CVE-2020-2506",
       "CVE-2020-29574",
+      "CVE-2020-9377",
       "CVE-2021-20035",
       "CVE-2021-27876",
       "CVE-2021-32030",
@@ -1108,6 +1150,7 @@
     "name": "Valid Accounts: Default Accounts",
     "version": "v19",
     "cve_refs": [
+      "CVE-2017-6334",
       "CVE-2021-28799",
       "CVE-2022-24112",
       "CVE-2022-24706",
@@ -1351,6 +1394,7 @@
     "version": "v19",
     "cve_refs": [
       "CVE-2018-10561",
+      "CVE-2020-2021",
       "CVE-2022-1040",
       "CVE-2022-23176",
       "CVE-2022-42475",
@@ -1402,6 +1446,7 @@
       "Persistence"
     ],
     "cve_refs": [
+      "CVE-2022-21999",
       "CVE-2022-40684",
       "CVE-2026-63030"
     ]
@@ -1410,22 +1455,43 @@
     "name": "Exploit Public-Facing Application",
     "version": "v19",
     "cve_refs": [
+      "CVE-2005-2773",
       "CVE-2007-3010",
       "CVE-2008-4128",
       "CVE-2008-4250",
+      "CVE-2009-1151",
       "CVE-2010-0738",
       "CVE-2010-1428",
+      "CVE-2010-2861",
+      "CVE-2010-4344",
+      "CVE-2010-5330",
+      "CVE-2012-1823",
+      "CVE-2013-2251",
       "CVE-2013-3993",
+      "CVE-2013-4810",
+      "CVE-2013-5223",
+      "CVE-2014-0130",
       "CVE-2014-0160",
       "CVE-2014-0780",
       "CVE-2014-100005",
       "CVE-2014-2120",
+      "CVE-2014-3120",
       "CVE-2014-3931",
       "CVE-2014-6278",
+      "CVE-2014-6287",
       "CVE-2014-8361",
+      "CVE-2015-0666",
+      "CVE-2015-1187",
+      "CVE-2015-1427",
+      "CVE-2015-3035",
+      "CVE-2015-4068",
       "CVE-2015-5317",
       "CVE-2015-7755",
+      "CVE-2016-0752",
       "CVE-2016-10033",
+      "CVE-2016-10174",
+      "CVE-2016-11021",
+      "CVE-2016-1555",
       "CVE-2016-20017",
       "CVE-2016-2386",
       "CVE-2016-2388",
@@ -1440,21 +1506,31 @@
       "CVE-2017-1000353",
       "CVE-2017-11317",
       "CVE-2017-11357",
+      "CVE-2017-12615",
+      "CVE-2017-12617",
       "CVE-2017-12637",
       "CVE-2017-15944",
       "CVE-2017-18362",
       "CVE-2017-18368",
       "CVE-2017-3066",
       "CVE-2017-3506",
+      "CVE-2017-3881",
       "CVE-2017-5521",
+      "CVE-2017-6316",
+      "CVE-2017-6334",
       "CVE-2017-6742",
       "CVE-2017-6862",
       "CVE-2017-6884",
       "CVE-2017-7494",
       "CVE-2017-7921",
+      "CVE-2018-0125",
+      "CVE-2018-0147",
       "CVE-2018-10561",
       "CVE-2018-10562",
+      "CVE-2018-11138",
+      "CVE-2018-1273",
       "CVE-2018-14667",
+      "CVE-2018-14839",
       "CVE-2018-14933",
       "CVE-2018-15133",
       "CVE-2018-18809",
@@ -1467,27 +1543,37 @@
       "CVE-2018-4063",
       "CVE-2018-5430",
       "CVE-2018-6530",
+      "CVE-2018-6961",
       "CVE-2018-7445",
       "CVE-2018-7602",
       "CVE-2018-7841",
       "CVE-2018-9276",
       "CVE-2019-0344",
       "CVE-2019-1003029",
+      "CVE-2019-10068",
       "CVE-2019-11001",
+      "CVE-2019-11043",
+      "CVE-2019-12989",
+      "CVE-2019-12991",
+      "CVE-2019-15107",
       "CVE-2019-15271",
       "CVE-2019-16057",
       "CVE-2019-16278",
+      "CVE-2019-16920",
       "CVE-2019-17621",
       "CVE-2019-19006",
       "CVE-2019-20500",
+      "CVE-2019-2616",
       "CVE-2019-3929",
       "CVE-2019-5418",
+      "CVE-2019-6340",
       "CVE-2019-6693",
       "CVE-2019-7192",
       "CVE-2019-7193",
       "CVE-2019-7194",
       "CVE-2019-7195",
       "CVE-2019-7256",
+      "CVE-2019-7483",
       "CVE-2019-9621",
       "CVE-2019-9874",
       "CVE-2019-9875",
@@ -1499,11 +1585,16 @@
       "CVE-2020-14644",
       "CVE-2020-15069",
       "CVE-2020-15415",
+      "CVE-2020-1631",
       "CVE-2020-17519",
+      "CVE-2020-1956",
+      "CVE-2020-2021",
       "CVE-2020-24363",
+      "CVE-2020-2506",
       "CVE-2020-25078",
       "CVE-2020-25079",
       "CVE-2020-2509",
+      "CVE-2020-25223",
       "CVE-2020-2551",
       "CVE-2020-2883",
       "CVE-2020-28949",
@@ -1511,8 +1602,14 @@
       "CVE-2020-3259",
       "CVE-2020-35730",
       "CVE-2020-36193",
+      "CVE-2020-5135",
+      "CVE-2020-5410",
       "CVE-2020-5741",
+      "CVE-2020-7247",
       "CVE-2020-7796",
+      "CVE-2020-9054",
+      "CVE-2020-9377",
+      "CVE-2021-20028",
       "CVE-2021-20035",
       "CVE-2021-20123",
       "CVE-2021-20124",
@@ -1520,6 +1617,7 @@
       "CVE-2021-22054",
       "CVE-2021-22175",
       "CVE-2021-22681",
+      "CVE-2021-22941",
       "CVE-2021-26085",
       "CVE-2021-26086",
       "CVE-2021-26828",
@@ -1544,6 +1642,7 @@
       "CVE-2021-40407",
       "CVE-2021-40655",
       "CVE-2021-41277",
+      "CVE-2021-42237",
       "CVE-2021-43798",
       "CVE-2021-44026",
       "CVE-2021-44207",
@@ -1570,7 +1669,9 @@
       "CVE-2022-24990",
       "CVE-2022-26134",
       "CVE-2022-26138",
+      "CVE-2022-26143",
       "CVE-2022-26258",
+      "CVE-2022-26318",
       "CVE-2022-26352",
       "CVE-2022-26500",
       "CVE-2022-26501",
@@ -1942,6 +2043,7 @@
       "CVE-2025-61932",
       "CVE-2025-6204",
       "CVE-2025-6205",
+      "CVE-2025-62593",
       "CVE-2025-62847",
       "CVE-2025-62848",
       "CVE-2025-64328",
@@ -2114,6 +2216,8 @@
       "Initial Access"
     ],
     "cve_refs": [
+      "CVE-2018-11138",
+      "CVE-2018-1273",
       "CVE-2024-4978",
       "CVE-2025-54136",
       "CVE-2026-8398"
@@ -2123,6 +2227,7 @@
     "name": "Supply Chain Compromise: Software Dependencies and Development Tools",
     "version": "v19",
     "cve_refs": [
+      "CVE-2019-15107",
       "CVE-2022-23812",
       "CVE-2025-30066",
       "CVE-2025-30154",
@@ -2153,6 +2258,7 @@
     "name": "Supply Chain Compromise: Software Supply Chain",
     "version": "v19",
     "cve_refs": [
+      "CVE-2019-1003030",
       "CVE-2022-30333",
       "CVE-2024-0129",
       "CVE-2024-11392",
@@ -2240,6 +2346,7 @@
       "CVE-2009-0556",
       "CVE-2009-0557",
       "CVE-2009-0563",
+      "CVE-2009-0927",
       "CVE-2009-1537",
       "CVE-2009-1862",
       "CVE-2009-3459",
@@ -2260,16 +2367,23 @@
       "CVE-2012-0754",
       "CVE-2012-1710",
       "CVE-2012-1889",
+      "CVE-2012-2034",
+      "CVE-2012-2539",
       "CVE-2012-4792",
       "CVE-2012-4969",
       "CVE-2012-5054",
+      "CVE-2012-5076",
       "CVE-2013-0074",
       "CVE-2013-0422",
       "CVE-2013-0431",
       "CVE-2013-0643",
       "CVE-2013-0648",
       "CVE-2013-1331",
+      "CVE-2013-1690",
       "CVE-2013-2423",
+      "CVE-2013-2465",
+      "CVE-2013-2551",
+      "CVE-2013-2729",
       "CVE-2013-3163",
       "CVE-2013-3893",
       "CVE-2013-3896",
@@ -2280,6 +2394,7 @@
       "CVE-2014-0546",
       "CVE-2014-4123",
       "CVE-2014-4148",
+      "CVE-2014-6332",
       "CVE-2014-8439",
       "CVE-2014-9163",
       "CVE-2015-0016",
@@ -2288,22 +2403,32 @@
       "CVE-2015-0311",
       "CVE-2015-0313",
       "CVE-2015-1671",
+      "CVE-2015-1770",
+      "CVE-2015-2419",
       "CVE-2015-2425",
+      "CVE-2015-2426",
       "CVE-2015-2502",
       "CVE-2015-3113",
       "CVE-2015-5122",
       "CVE-2015-5123",
       "CVE-2015-8651",
       "CVE-2016-0034",
+      "CVE-2016-0189",
       "CVE-2016-0984",
       "CVE-2016-1010",
       "CVE-2016-1646",
       "CVE-2016-3393",
+      "CVE-2016-4171",
       "CVE-2016-4657",
       "CVE-2016-5198",
+      "CVE-2016-7200",
+      "CVE-2016-7201",
       "CVE-2016-7256",
+      "CVE-2016-7892",
       "CVE-2016-9079",
       "CVE-2017-0022",
+      "CVE-2017-0037",
+      "CVE-2017-0059",
       "CVE-2017-0149",
       "CVE-2017-5030",
       "CVE-2017-5070",
@@ -2315,6 +2440,7 @@
       "CVE-2018-5002",
       "CVE-2018-6065",
       "CVE-2019-0880",
+      "CVE-2019-0903",
       "CVE-2019-11707",
       "CVE-2019-11708",
       "CVE-2019-13720",
@@ -2472,6 +2598,7 @@
     "name": "Exploitation for Credential Access",
     "version": "v19",
     "cve_refs": [
+      "CVE-2014-6324",
       "CVE-2018-13374",
       "CVE-2023-23397",
       "CVE-2023-43791",
@@ -2589,6 +2716,7 @@
       "CVE-2017-18362",
       "CVE-2018-19949",
       "CVE-2018-7602",
+      "CVE-2018-8405",
       "CVE-2019-7194",
       "CVE-2019-7195",
       "CVE-2020-0638",
@@ -2783,6 +2911,7 @@
     "name": "Abuse Elevation Control Mechanism: Setuid and Setgid",
     "version": "v19",
     "cve_refs": [
+      "CVE-2010-4345",
       "CVE-2011-1823",
       "CVE-2017-15944",
       "CVE-2026-31431",
@@ -2902,11 +3031,19 @@
     "name": "Unsecured Credentials: Credentials In Files",
     "version": "v19",
     "cve_refs": [
+      "CVE-2010-2861",
       "CVE-2011-4723",
+      "CVE-2014-0130",
       "CVE-2014-0780",
+      "CVE-2015-0666",
+      "CVE-2015-3035",
       "CVE-2015-4495",
+      "CVE-2016-0752",
+      "CVE-2018-0147",
       "CVE-2018-18809",
       "CVE-2018-5430",
+      "CVE-2019-1003030",
+      "CVE-2020-1631",
       "CVE-2023-22952",
       "CVE-2024-48248",
       "CVE-2024-6587",
@@ -3071,6 +3208,7 @@
     "description": "Adversaries may modify authentication mechanisms and processes to access user credentials or enable otherwise unwarranted access to accounts.",
     "cve_refs": [
       "CVE-2016-6366",
+      "CVE-2018-0147",
       "CVE-2021-35587",
       "CVE-2023-20867",
       "CVE-2024-12776",
@@ -3178,6 +3316,7 @@
       "CVE-2007-5659",
       "CVE-2009-0557",
       "CVE-2009-0563",
+      "CVE-2009-0927",
       "CVE-2009-3953",
       "CVE-2009-4324",
       "CVE-2010-2572",
@@ -3185,8 +3324,12 @@
       "CVE-2011-0609",
       "CVE-2011-2462",
       "CVE-2012-0754",
+      "CVE-2012-2539",
       "CVE-2013-1331",
+      "CVE-2015-1770",
       "CVE-2018-4990",
+      "CVE-2018-8414",
+      "CVE-2019-0903",
       "CVE-2021-38406",
       "CVE-2022-30190",
       "CVE-2022-30333",
@@ -3218,6 +3361,7 @@
       "Initial Access"
     ],
     "cve_refs": [
+      "CVE-2012-0518",
       "CVE-2012-0767",
       "CVE-2015-3113",
       "CVE-2023-37580"
@@ -3331,8 +3475,10 @@
     "cve_refs": [
       "BUG-2026-NIGHTMARE-ECLIPSE-GREENPLASMA",
       "CVE-2014-4077",
+      "CVE-2018-8440",
       "CVE-2021-25337",
       "CVE-2021-34484",
+      "CVE-2022-21999",
       "CVE-2022-23748",
       "CVE-2024-7262",
       "CVE-2026-45321"
@@ -3834,10 +3980,18 @@
     "version": "v19",
     "cve_refs": [
       "CVE-2013-3993",
+      "CVE-2014-0130",
+      "CVE-2015-0666",
+      "CVE-2015-3035",
+      "CVE-2015-4068",
       "CVE-2015-4495",
+      "CVE-2016-0752",
+      "CVE-2018-14839",
       "CVE-2019-18426",
+      "CVE-2019-2616",
       "CVE-2019-3568",
       "CVE-2019-7287",
+      "CVE-2020-1631",
       "CVE-2020-2509",
       "CVE-2020-9934",
       "CVE-2021-27876",
@@ -3896,12 +4050,17 @@
       "CVE-2012-0767",
       "CVE-2012-1710",
       "CVE-2012-1889",
+      "CVE-2012-2034",
       "CVE-2012-4969",
       "CVE-2012-5054",
+      "CVE-2012-5076",
       "CVE-2013-0074",
       "CVE-2013-0422",
       "CVE-2013-0431",
+      "CVE-2013-1690",
       "CVE-2013-2423",
+      "CVE-2013-2465",
+      "CVE-2013-2551",
       "CVE-2013-3163",
       "CVE-2013-3896",
       "CVE-2013-7331",
@@ -3909,6 +4068,7 @@
       "CVE-2014-2817",
       "CVE-2014-4123",
       "CVE-2014-4148",
+      "CVE-2014-6332",
       "CVE-2014-8439",
       "CVE-2014-9163",
       "CVE-2015-0016",
@@ -3917,6 +4077,7 @@
       "CVE-2015-0311",
       "CVE-2015-0313",
       "CVE-2015-1671",
+      "CVE-2015-2419",
       "CVE-2015-2425",
       "CVE-2015-2502",
       "CVE-2015-3113",
@@ -3926,17 +4087,24 @@
       "CVE-2015-8651",
       "CVE-2016-0034",
       "CVE-2016-0162",
+      "CVE-2016-0189",
       "CVE-2016-0984",
       "CVE-2016-1010",
       "CVE-2016-1646",
       "CVE-2016-3298",
       "CVE-2016-3351",
+      "CVE-2016-4171",
       "CVE-2016-4656",
       "CVE-2016-4657",
       "CVE-2016-5198",
+      "CVE-2016-7200",
+      "CVE-2016-7201",
       "CVE-2016-7256",
+      "CVE-2016-7892",
       "CVE-2016-9079",
       "CVE-2017-0022",
+      "CVE-2017-0037",
+      "CVE-2017-0059",
       "CVE-2017-0149",
       "CVE-2017-0210",
       "CVE-2017-5030",
@@ -3984,6 +4152,7 @@
       "CVE-2025-24201",
       "CVE-2025-43529",
       "CVE-2025-4919",
+      "CVE-2025-62593",
       "CVE-2026-11645"
     ],
     "description_full": "Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. Multiple ways of delivering exploit code to a browser exist (i.e., [Drive-by Target](https://attack.mitre.org/techniques/T1608/004)), including: * A legitimate website is compromised, allowing adversaries to inject malicious code * Script files served to a legitimate website from a publicly writeable cloud storage bucket are modified by an adversary * Malicious ads are paid for and served through legitimate ad providers (i.e., [Malvertising](https://attack.mitre.org/techniques/T1583/008)) * Built-in web application interfaces that allow user-controllable content are leveraged for the insertion of malicious scripts or iFrames (e.g., cross-site scripting) Browser push notifications may also be abused by adversaries and leveraged for malicious code injection via [User Execution](https://attack.mitre.org/techniques/T1204). By clicking \"allow\" on browser push notifications, users may be granting a website permission to run JavaScript code on their browser.(Citation: Push notifications - viruspositive)(Citation: push notification -mcafee)(Citation: push notifications - malwarebytes) Often the website used by an adversary is one visited by a specific community, such as government, a particular industry, or a particular region, where the goal is to compromise a specific user or set of users based on a shared interest. This kind of targeted campaign is often referred to a strategic web compromise or watering hole attack. There are several known examples of this occurring.(Citation: Shadowserver Strategic Web Compromise) Typical drive-by compromise process: 1. A user visits a website that is used to host the adversary controlled content. 2. Scripts automatically execute, typically searching versions of the browser and plugins for a potentially vulnerable version. The user may be required to assist in this process by enabling scripting, notifications, or active website components and ignoring warning dialog boxes. 3. Upon finding a vulnerable version, exploit code is delivered to the browser. 4. If exploitation is successful, the adversary will gain code execution on the user's system unless other protections are in place. In some cases, a second visit to the website after the initial scan is required before exploit code is delivered. Unlike [Exploit Public-Facing Application](https://attack.mitre.org/techniques/T1190), the focus of this technique is to exploit software on a client endpoint upon visiting a website. This will commonly give an adversary access to systems on the internal network instead of external systems that may be in a DMZ.",
@@ -4034,8 +4203,11 @@
     "name": "Network Denial of Service",
     "version": "v19",
     "cve_refs": [
+      "CVE-2009-2055",
+      "CVE-2010-3035",
       "CVE-2021-27137",
       "CVE-2021-45382",
+      "CVE-2022-26143",
       "CVE-2022-26258",
       "CVE-2023-44487",
       "CVE-2023-50387",
@@ -4108,6 +4280,7 @@
     "name": "Steal Web Session Cookie",
     "version": "v19",
     "cve_refs": [
+      "CVE-2013-5223",
       "CVE-2022-22536",
       "CVE-2023-34192",
       "CVE-2023-6571",
@@ -4246,7 +4419,9 @@
     "notes": "Added v0.13.17 to support DoS-class KEV bulk imports.",
     "cve_refs": [
       "CVE-2004-1464",
+      "CVE-2015-4068",
       "CVE-2016-4523",
+      "CVE-2018-0125",
       "CVE-2021-25489",
       "CVE-2023-20109",
       "CVE-2023-29552",
@@ -4735,8 +4910,10 @@
     "stix_id": "attack-pattern--e3a12395-188d-4051-9a16-ea8e14d07b88",
     "is_subtechnique": false,
     "cve_refs": [
+      "CVE-2015-1427",
       "CVE-2017-0147",
       "CVE-2017-6862",
+      "CVE-2019-2616",
       "CVE-2022-20821",
       "CVE-2022-24706",
       "CVE-2026-34486"
@@ -4987,6 +5164,7 @@
     "is_subtechnique": false,
     "cve_refs": [
       "CVE-2017-18362",
+      "CVE-2018-11138",
       "CVE-2022-36537",
       "CVE-2022-40139",
       "CVE-2026-18556",
@@ -5070,7 +5248,8 @@
       "CVE-2016-3351",
       "CVE-2016-4655",
       "CVE-2019-0703",
-      "CVE-2021-26085"
+      "CVE-2021-26085",
+      "CVE-2022-22674"
     ]
   },
   "T1083": {
@@ -5096,8 +5275,10 @@
     "stix_id": "attack-pattern--7bc57495-ea59-4380-be31-a64af124ef18",
     "is_subtechnique": false,
     "cve_refs": [
+      "CVE-2010-2861",
       "CVE-2013-3993",
       "CVE-2013-7331",
+      "CVE-2015-4068",
       "CVE-2016-3298",
       "CVE-2017-0022",
       "CVE-2017-12637",
@@ -5105,7 +5286,9 @@
       "CVE-2019-0676",
       "CVE-2019-7194",
       "CVE-2019-7195",
+      "CVE-2019-7483",
       "CVE-2020-17519",
+      "CVE-2020-5410",
       "CVE-2021-20123",
       "CVE-2021-20124",
       "CVE-2021-26085",
@@ -5317,6 +5500,7 @@
     "is_subtechnique": false,
     "cve_refs": [
       "CVE-2014-0502",
+      "CVE-2015-1187",
       "CVE-2015-2502",
       "CVE-2017-11357",
       "CVE-2022-21587",
@@ -5408,7 +5592,10 @@
       "Windows"
     ],
     "stix_id": "attack-pattern--57340c81-c025-4189-8fa0-fc7ede51bae4",
-    "is_subtechnique": false
+    "is_subtechnique": false,
+    "cve_refs": [
+      "CVE-2010-4398"
+    ]
   },
   "T1113": {
     "id": "T1113",
@@ -5679,6 +5866,7 @@
     "stix_id": "attack-pattern--dcaa092b-7de9-4a21-977f-7fcb77e89c48",
     "is_subtechnique": false,
     "cve_refs": [
+      "CVE-2016-0151",
       "CVE-2017-0005",
       "CVE-2019-0880",
       "CVE-2023-29336"
@@ -6071,14 +6259,17 @@
       "CVE-2008-4250",
       "CVE-2016-3427",
       "CVE-2016-8735",
+      "CVE-2017-0146",
       "CVE-2017-0147",
       "CVE-2017-0148",
+      "CVE-2017-3881",
       "CVE-2017-6742",
       "CVE-2017-6862",
       "CVE-2017-7494",
       "CVE-2017-8543",
       "CVE-2018-7445",
       "CVE-2019-0703",
+      "CVE-2021-20028",
       "CVE-2021-27137",
       "CVE-2021-27877",
       "CVE-2021-27878",
@@ -6117,10 +6308,12 @@
     "stix_id": "attack-pattern--fe926152-f431-4baf-956c-4ad3cb0bf23b",
     "is_subtechnique": false,
     "cve_refs": [
+      "CVE-2012-5076",
       "CVE-2013-0422",
       "CVE-2013-0431",
       "CVE-2013-0643",
       "CVE-2013-2423",
+      "CVE-2013-2465",
       "CVE-2015-0071",
       "CVE-2015-0310",
       "CVE-2018-4344",
@@ -6131,6 +6324,7 @@
       "CVE-2021-25370",
       "CVE-2021-30883",
       "CVE-2021-31010",
+      "CVE-2022-22674",
       "CVE-2022-22675",
       "CVE-2022-32894",
       "CVE-2022-4135",
@@ -6682,9 +6876,11 @@
     "stix_id": "attack-pattern--67720091-eee3-4d2d-ae16-8264567f6f5b",
     "is_subtechnique": false,
     "cve_refs": [
+      "CVE-2019-1405",
       "CVE-2021-3560",
       "CVE-2021-4034",
       "CVE-2022-0847",
+      "CVE-2022-21919",
       "CVE-2026-48172"
     ]
   },
@@ -7281,7 +7477,11 @@
       "Network Devices"
     ],
     "stix_id": "attack-pattern--ae7f3575-0a5e-427e-991b-fe03ad44c754",
-    "is_subtechnique": false
+    "is_subtechnique": false,
+    "cve_refs": [
+      "CVE-2017-3881",
+      "CVE-2018-6961"
+    ]
   },
   "T1602": {
     "id": "T1602",
@@ -8653,6 +8853,7 @@
     "_auto_imported": true,
     "_intake_method": "mitre-attack-stix",
     "cve_refs": [
+      "CVE-2017-0146",
       "CVE-2017-0147",
       "CVE-2017-8543"
     ]
@@ -9931,7 +10132,10 @@
     "stix_id": "attack-pattern--005a06c6-14bf-4118-afa0-ebcd8aebb0c9",
     "last_verified": "2026-05-19",
     "_auto_imported": true,
-    "_intake_method": "mitre-attack-stix"
+    "_intake_method": "mitre-attack-stix",
+    "cve_refs": [
+      "CVE-2018-8440"
+    ]
   },
   "T1053.006": {
     "id": "T1053.006",
@@ -10465,8 +10669,13 @@
     "_auto_imported": true,
     "_intake_method": "mitre-attack-stix",
     "cve_refs": [
+      "CVE-2014-6287",
       "CVE-2018-2628",
+      "CVE-2018-8414",
+      "CVE-2019-10068",
+      "CVE-2021-22941",
       "CVE-2021-27852",
+      "CVE-2021-42237",
       "CVE-2022-28810"
     ]
   },
@@ -10498,19 +10707,45 @@
     "_auto_imported": true,
     "_intake_method": "mitre-attack-stix",
     "cve_refs": [
+      "CVE-2005-2773",
       "CVE-2007-3010",
+      "CVE-2009-1151",
+      "CVE-2010-4344",
+      "CVE-2010-4345",
+      "CVE-2010-5330",
+      "CVE-2012-1823",
+      "CVE-2015-1187",
+      "CVE-2015-1427",
+      "CVE-2016-10174",
+      "CVE-2016-11021",
+      "CVE-2016-1555",
       "CVE-2017-15944",
       "CVE-2017-8291",
+      "CVE-2018-0125",
+      "CVE-2018-0147",
       "CVE-2018-10562",
+      "CVE-2018-11138",
+      "CVE-2018-14839",
       "CVE-2018-19949",
       "CVE-2018-2628",
       "CVE-2018-6530",
+      "CVE-2018-6961",
       "CVE-2018-7445",
       "CVE-2018-7602",
       "CVE-2018-7841",
+      "CVE-2019-11043",
+      "CVE-2019-12991",
+      "CVE-2019-15107",
       "CVE-2019-16057",
+      "CVE-2019-16920",
       "CVE-2019-3929",
+      "CVE-2019-6340",
+      "CVE-2020-1956",
       "CVE-2020-2509",
+      "CVE-2020-25223",
+      "CVE-2020-7247",
+      "CVE-2020-9054",
+      "CVE-2020-9377",
       "CVE-2021-45382",
       "CVE-2022-0543",
       "CVE-2022-1388",
@@ -10563,6 +10798,7 @@
     "_auto_imported": true,
     "_intake_method": "mitre-attack-stix",
     "cve_refs": [
+      "CVE-2014-6332",
       "CVE-2023-21715"
     ]
   },
@@ -12000,6 +12236,8 @@
     "_auto_imported": true,
     "_intake_method": "mitre-attack-stix",
     "cve_refs": [
+      "CVE-2016-0040",
+      "CVE-2016-0151",
       "CVE-2022-24521",
       "CVE-2022-37969",
       "CVE-2023-23376"
@@ -12403,6 +12641,7 @@
     "_auto_imported": true,
     "_intake_method": "mitre-attack-stix",
     "cve_refs": [
+      "CVE-2012-0518",
       "CVE-2012-1710",
       "CVE-2012-4969",
       "CVE-2012-5054",
@@ -12410,11 +12649,15 @@
       "CVE-2013-0422",
       "CVE-2016-0984",
       "CVE-2016-1010",
+      "CVE-2016-4171",
+      "CVE-2016-7200",
       "CVE-2016-7256",
+      "CVE-2017-0037",
       "CVE-2017-0210",
       "CVE-2017-5030",
       "CVE-2017-5070",
       "CVE-2019-0676",
+      "CVE-2019-0903",
       "CVE-2019-11707",
       "CVE-2021-1789",
       "CVE-2021-30533",
@@ -12456,6 +12699,7 @@
       "CVE-2008-0655",
       "CVE-2009-0557",
       "CVE-2009-0563",
+      "CVE-2009-0927",
       "CVE-2009-1862",
       "CVE-2009-3953",
       "CVE-2009-4324",
@@ -12467,16 +12711,20 @@
       "CVE-2012-0151",
       "CVE-2012-0754",
       "CVE-2013-1331",
+      "CVE-2013-2729",
       "CVE-2013-6282",
       "CVE-2014-0546",
       "CVE-2014-4077",
       "CVE-2014-4148",
       "CVE-2015-1671",
+      "CVE-2015-1770",
       "CVE-2015-6175",
+      "CVE-2016-7201",
       "CVE-2016-7256",
       "CVE-2018-4344",
       "CVE-2018-4990",
       "CVE-2018-5002",
+      "CVE-2018-8414",
       "CVE-2019-8605",
       "CVE-2020-28949",
       "CVE-2020-3837",
@@ -12975,7 +13223,10 @@
     "stix_id": "attack-pattern--840a987a-99bd-4a80-a5c9-0cb2baa6cade",
     "last_verified": "2026-05-19",
     "_auto_imported": true,
-    "_intake_method": "mitre-attack-stix"
+    "_intake_method": "mitre-attack-stix",
+    "cve_refs": [
+      "CVE-2018-8414"
+    ]
   },
   "T1218.007": {
     "id": "T1218.007",
@@ -13308,7 +13559,11 @@
     "stix_id": "attack-pattern--34e793de-0274-4982-9c1a-246ed1c19dee",
     "last_verified": "2026-05-19",
     "_auto_imported": true,
-    "_intake_method": "mitre-attack-stix"
+    "_intake_method": "mitre-attack-stix",
+    "cve_refs": [
+      "CVE-2019-1253",
+      "CVE-2019-1315"
+    ]
   },
   "T1222.002": {
     "id": "T1222.002",
@@ -13757,7 +14012,8 @@
     "_auto_imported": true,
     "_intake_method": "mitre-attack-stix",
     "cve_refs": [
-      "CVE-2022-0028"
+      "CVE-2022-0028",
+      "CVE-2022-26143"
     ]
   },
   "T1499.003": {
@@ -13816,7 +14072,10 @@
     "_auto_imported": true,
     "_intake_method": "mitre-attack-stix",
     "cve_refs": [
+      "CVE-2009-2055",
+      "CVE-2010-3035",
       "CVE-2016-4523",
+      "CVE-2020-5135",
       "CVE-2021-31166",
       "CVE-2026-20349"
     ]
@@ -13901,18 +14160,26 @@
     "_auto_imported": true,
     "_intake_method": "mitre-attack-stix",
     "cve_refs": [
+      "CVE-2009-1151",
       "CVE-2010-0738",
       "CVE-2010-1428",
+      "CVE-2012-1823",
+      "CVE-2013-4810",
       "CVE-2014-2120",
       "CVE-2017-11317",
       "CVE-2017-11357",
+      "CVE-2017-12615",
+      "CVE-2017-12617",
       "CVE-2017-15944",
       "CVE-2018-4063",
       "CVE-2018-7602",
       "CVE-2018-7841",
+      "CVE-2019-10068",
+      "CVE-2019-6340",
       "CVE-2020-14644",
       "CVE-2020-28949",
       "CVE-2020-36193",
+      "CVE-2021-22941",
       "CVE-2021-26828",
       "CVE-2021-31196",
       "CVE-2021-38163",
@@ -14343,7 +14610,9 @@
       "CVE-2018-19321",
       "CVE-2018-19322",
       "CVE-2018-19323",
+      "CVE-2018-8406",
       "CVE-2018-8589",
+      "CVE-2019-1322",
       "CVE-2021-21551",
       "CVE-2022-2294",
       "CVE-2026-18577"
@@ -15281,6 +15550,7 @@
     "_auto_imported": true,
     "_intake_method": "mitre-attack-stix",
     "cve_refs": [
+      "CVE-2010-4398",
       "CVE-2019-1388",
       "CVE-2022-26904"
     ]
@@ -16265,7 +16535,10 @@
     "stix_id": "attack-pattern--768dce68-8d0d-477a-b01d-0eea98b963a1",
     "last_verified": "2026-05-19",
     "_auto_imported": true,
-    "_intake_method": "mitre-attack-stix"
+    "_intake_method": "mitre-attack-stix",
+    "cve_refs": [
+      "CVE-2014-6324"
+    ]
   },
   "T1558.002": {
     "id": "T1558.002",
@@ -16393,6 +16666,8 @@
     "_auto_imported": true,
     "_intake_method": "mitre-attack-stix",
     "cve_refs": [
+      "CVE-2017-0213",
+      "CVE-2019-1405",
       "CVE-2022-41033"
     ]
   },
@@ -17369,7 +17644,10 @@
     "stix_id": "attack-pattern--f1951e8a-500e-4a26-8803-76d95c4554b4",
     "last_verified": "2026-05-19",
     "_auto_imported": true,
-    "_intake_method": "mitre-attack-stix"
+    "_intake_method": "mitre-attack-stix",
+    "cve_refs": [
+      "CVE-2017-0146"
+    ]
   },
   "T1569.003": {
     "id": "T1569.003",
@@ -17483,6 +17761,7 @@
       "CVE-2012-1854",
       "CVE-2020-3153",
       "CVE-2020-3433",
+      "CVE-2022-21919",
       "CVE-2022-26904",
       "CVE-2022-41073"
     ]
@@ -18262,9 +18541,11 @@
     "_intake_method": "mitre-attack-stix",
     "cve_refs": [
       "CVE-2011-4723",
+      "CVE-2016-10174",
       "CVE-2017-5521",
       "CVE-2018-6530",
       "CVE-2018-7445",
+      "CVE-2019-16920",
       "CVE-2022-30525"
     ]
   },
@@ -18647,8 +18928,11 @@
     "_intake_method": "mitre-attack-stix",
     "cve_refs": [
       "CVE-2014-8439",
+      "CVE-2015-2419",
+      "CVE-2015-2426",
       "CVE-2015-5122",
       "CVE-2015-5123",
+      "CVE-2016-0040",
       "CVE-2022-41073"
     ]
   },
@@ -19125,7 +19409,10 @@
     "stix_id": "attack-pattern--774ad5bb-2366-4c13-a8a9-65e50b292e7c",
     "last_verified": "2026-05-19",
     "_auto_imported": true,
-    "_intake_method": "mitre-attack-stix"
+    "_intake_method": "mitre-attack-stix",
+    "cve_refs": [
+      "CVE-2019-7483"
+    ]
   },
   "T1593.001": {
     "id": "T1593.001",