@blamejs/exceptd-skills 0.19.32 → 0.19.34

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (127) hide show
  1. package/CHANGELOG.md +22 -0
  2. package/bin/exceptd.js +896 -2824
  3. package/data/_indexes/_meta.json +8 -8
  4. package/data/_indexes/activity-feed.json +2 -2
  5. package/data/_indexes/catalog-summaries.json +7 -7
  6. package/data/_indexes/chains.json +60118 -0
  7. package/data/attack-techniques.json +267 -7
  8. package/data/cve-catalog.json +9991 -3
  9. package/data/cwe-catalog.json +109 -2
  10. package/data/framework-control-gaps.json +578 -3
  11. package/data/zeroday-lessons.json +8330 -1
  12. package/lib/auto-discovery.js +56 -286
  13. package/lib/canonical-eq.js +7 -40
  14. package/lib/citation-resolve.js +22 -70
  15. package/lib/collectors/ai-api.js +20 -54
  16. package/lib/collectors/cicd-pipeline-compromise.js +40 -108
  17. package/lib/collectors/citation-hygiene.js +72 -210
  18. package/lib/collectors/containers.js +41 -130
  19. package/lib/collectors/cred-stores.js +31 -115
  20. package/lib/collectors/crypto-codebase.js +55 -138
  21. package/lib/collectors/crypto.js +24 -54
  22. package/lib/collectors/hardening.js +20 -78
  23. package/lib/collectors/kernel.js +16 -46
  24. package/lib/collectors/library-author.js +57 -206
  25. package/lib/collectors/mcp.js +24 -70
  26. package/lib/collectors/runtime.js +24 -86
  27. package/lib/collectors/sbom.js +34 -106
  28. package/lib/collectors/scan-excludes.js +31 -138
  29. package/lib/collectors/secrets.js +62 -178
  30. package/lib/cross-ref-api.js +39 -123
  31. package/lib/currency-severity.js +8 -27
  32. package/lib/cve-batch.js +13 -21
  33. package/lib/cve-cli.js +13 -20
  34. package/lib/cve-curation.js +72 -239
  35. package/lib/cve-regression-watcher.js +29 -152
  36. package/lib/cvss.js +13 -54
  37. package/lib/doctor-bucketing.js +3 -19
  38. package/lib/exit-codes.js +10 -42
  39. package/lib/flag-suggest.js +7 -25
  40. package/lib/framework-gap.js +35 -114
  41. package/lib/gap-detectors.js +37 -159
  42. package/lib/id-validation.js +9 -30
  43. package/lib/job-queue.js +13 -36
  44. package/lib/lint-skills.js +64 -232
  45. package/lib/playbook-runner.js +693 -2095
  46. package/lib/prefetch.js +100 -376
  47. package/lib/refresh-external.js +199 -627
  48. package/lib/refresh-network.js +75 -307
  49. package/lib/rfc-cli.js +23 -68
  50. package/lib/scoring.js +77 -145
  51. package/lib/sign.js +43 -229
  52. package/lib/source-advisories.js +43 -194
  53. package/lib/source-ghsa.js +37 -120
  54. package/lib/source-osv.js +94 -266
  55. package/lib/ttp-mapper.js +14 -24
  56. package/lib/upstream-check-cli.js +10 -28
  57. package/lib/upstream-check.js +19 -44
  58. package/lib/validate-catalog-meta.js +17 -61
  59. package/lib/validate-cve-catalog.js +43 -119
  60. package/lib/validate-indexes.js +25 -76
  61. package/lib/validate-package.js +16 -62
  62. package/lib/validate-playbooks.js +69 -275
  63. package/lib/validate-vendor.js +16 -49
  64. package/lib/verify.js +56 -286
  65. package/lib/version-pins.js +5 -34
  66. package/lib/worker-pool.js +11 -30
  67. package/lib/xml-tokenizer.js +47 -152
  68. package/manifest.json +53 -53
  69. package/orchestrator/dispatcher.js +17 -68
  70. package/orchestrator/event-bus.js +11 -74
  71. package/orchestrator/index.js +138 -412
  72. package/orchestrator/pipeline.js +28 -85
  73. package/orchestrator/scanner.js +34 -138
  74. package/orchestrator/scheduler.js +20 -84
  75. package/package.json +2 -2
  76. package/sbom.cdx.json +253 -253
  77. package/scripts/audit-catalog-gaps.js +9 -62
  78. package/scripts/audit-cross-skill.js +5 -31
  79. package/scripts/audit-perf.js +6 -16
  80. package/scripts/backfill-theater-test.js +7 -64
  81. package/scripts/bootstrap.js +12 -44
  82. package/scripts/build-indexes.js +40 -154
  83. package/scripts/builders/activity-feed.js +4 -14
  84. package/scripts/builders/catalog-summaries.js +3 -10
  85. package/scripts/builders/currency.js +7 -20
  86. package/scripts/builders/cwe-chains.js +7 -30
  87. package/scripts/builders/did-ladders.js +6 -13
  88. package/scripts/builders/frequency.js +5 -19
  89. package/scripts/builders/jurisdiction-clocks.js +6 -25
  90. package/scripts/builders/recipes.js +6 -14
  91. package/scripts/builders/section-offsets.js +13 -51
  92. package/scripts/builders/stale-content.js +7 -28
  93. package/scripts/builders/summary-cards.js +8 -29
  94. package/scripts/builders/theater-fingerprints.js +12 -27
  95. package/scripts/builders/token-budget.js +4 -31
  96. package/scripts/check-agents-md-collectors.js +11 -54
  97. package/scripts/check-catalog-gap-budget.js +15 -32
  98. package/scripts/check-changelog-extract.js +18 -48
  99. package/scripts/check-codebase-patterns-currency.js +6 -22
  100. package/scripts/check-codebase-patterns.js +50 -143
  101. package/scripts/check-epss-consistency.js +9 -64
  102. package/scripts/check-framework-gap-coverage.js +13 -31
  103. package/scripts/check-manifest-snapshot.js +13 -73
  104. package/scripts/check-sbom-currency.js +44 -142
  105. package/scripts/check-test-count.js +15 -52
  106. package/scripts/check-test-coverage.js +66 -197
  107. package/scripts/check-test-subjects.js +21 -62
  108. package/scripts/check-ttp-references.js +14 -38
  109. package/scripts/check-ttp-upstream.js +8 -40
  110. package/scripts/check-version-bump.js +9 -61
  111. package/scripts/check-version-tags.js +20 -121
  112. package/scripts/predeploy.js +38 -184
  113. package/scripts/refresh-manifest-snapshot.js +16 -38
  114. package/scripts/refresh-mitre-atlas.js +3 -8
  115. package/scripts/refresh-mitre-attack.js +1 -8
  116. package/scripts/refresh-mitre-d3fend.js +3 -9
  117. package/scripts/refresh-mitre-ics-attack.js +3 -8
  118. package/scripts/refresh-reverse-refs.js +27 -94
  119. package/scripts/refresh-rfc-index.js +2 -10
  120. package/scripts/refresh-sbom.js +31 -161
  121. package/scripts/refresh-upstream-catalogs.js +40 -137
  122. package/scripts/release.js +69 -232
  123. package/scripts/run-e2e-scenarios.js +24 -71
  124. package/scripts/sync-manifest-metadata.js +10 -34
  125. package/scripts/sync-package-description.js +8 -17
  126. package/scripts/validate-vendor-online.js +13 -44
  127. package/scripts/verify-shipped-tarball.js +35 -140
package/data/attack-techniques.json CHANGED
@@ -139,6 +139,7 @@
139
139
  "Discovery"
140
140
  ],
141
141
  "cve_refs": [
142
+ "CVE-2017-6663",
142
143
  "CVE-2025-24054",
143
144
  "CVE-2025-30202"
144
145
  ]
@@ -211,7 +212,9 @@
211
212
  "cve_refs": [
212
213
  "CVE-2011-2005",
213
214
  "CVE-2015-0311",
215
+ "CVE-2019-0841",
214
216
  "CVE-2019-0880",
217
+ "CVE-2019-1129",
215
218
  "CVE-2024-35250"
216
219
  ]
217
220
  },
@@ -225,6 +228,7 @@
225
228
  ],
226
229
  "cve_refs": [
227
230
  "CVE-2008-4128",
231
+ "CVE-2013-0625",
228
232
  "CVE-2013-2251",
229
233
  "CVE-2013-4810",
230
234
  "CVE-2014-3120",
@@ -237,6 +241,7 @@
237
241
  "CVE-2016-20017",
238
242
  "CVE-2016-3714",
239
243
  "CVE-2016-6367",
244
+ "CVE-2016-7262",
240
245
  "CVE-2017-1000353",
241
246
  "CVE-2017-12615",
242
247
  "CVE-2017-12617",
@@ -254,6 +259,7 @@
254
259
  "CVE-2019-0344",
255
260
  "CVE-2019-1003029",
256
261
  "CVE-2019-11001",
262
+ "CVE-2019-11581",
257
263
  "CVE-2019-12989",
258
264
  "CVE-2019-15271",
259
265
  "CVE-2019-16278",
@@ -272,6 +278,7 @@
272
278
  "CVE-2020-25079",
273
279
  "CVE-2020-2551",
274
280
  "CVE-2020-2883",
281
+ "CVE-2020-8218",
275
282
  "CVE-2021-20035",
276
283
  "CVE-2021-31196",
277
284
  "CVE-2021-3129",
@@ -549,6 +556,7 @@
549
556
  "name": "Command and Scripting Interpreter: PowerShell",
550
557
  "version": "v19",
551
558
  "cve_refs": [
559
+ "CVE-2016-0099",
552
560
  "CVE-2016-3393",
553
561
  "CVE-2018-20753",
554
562
  "CVE-2019-1003030",
@@ -619,6 +627,7 @@
619
627
  "CVE-2018-19943",
620
628
  "CVE-2018-19953",
621
629
  "CVE-2018-6882",
630
+ "CVE-2018-8298",
622
631
  "CVE-2020-35730",
623
632
  "CVE-2021-26829",
624
633
  "CVE-2022-27926",
@@ -671,6 +680,7 @@
671
680
  "CVE-2013-2596",
672
681
  "CVE-2013-2597",
673
682
  "CVE-2013-3660",
683
+ "CVE-2013-5065",
674
684
  "CVE-2013-6282",
675
685
  "CVE-2014-0196",
676
686
  "CVE-2014-0546",
@@ -683,22 +693,33 @@
683
693
  "CVE-2014-6324",
684
694
  "CVE-2015-0016",
685
695
  "CVE-2015-1671",
696
+ "CVE-2015-1701",
686
697
  "CVE-2015-1769",
687
698
  "CVE-2015-2291",
688
699
  "CVE-2015-2360",
700
+ "CVE-2015-2387",
689
701
  "CVE-2015-2426",
702
+ "CVE-2015-2546",
690
703
  "CVE-2015-6175",
691
704
  "CVE-2016-0040",
705
+ "CVE-2016-0099",
692
706
  "CVE-2016-0151",
693
707
  "CVE-2016-0165",
708
+ "CVE-2016-3309",
694
709
  "CVE-2016-3393",
695
710
  "CVE-2016-4655",
696
711
  "CVE-2016-4656",
712
+ "CVE-2016-5195",
697
713
  "CVE-2016-6367",
698
714
  "CVE-2016-7256",
715
+ "CVE-2017-0001",
699
716
  "CVE-2017-0005",
717
+ "CVE-2017-0101",
700
718
  "CVE-2017-0213",
701
719
  "CVE-2017-1000253",
720
+ "CVE-2017-8540",
721
+ "CVE-2018-0167",
722
+ "CVE-2018-0175",
702
723
  "CVE-2018-0824",
703
724
  "CVE-2018-14634",
704
725
  "CVE-2018-19320",
@@ -707,15 +728,23 @@
707
728
  "CVE-2018-19323",
708
729
  "CVE-2018-4344",
709
730
  "CVE-2018-4990",
731
+ "CVE-2018-8120",
710
732
  "CVE-2018-8405",
711
733
  "CVE-2018-8406",
712
734
  "CVE-2018-8440",
735
+ "CVE-2018-8581",
713
736
  "CVE-2018-8589",
714
737
  "CVE-2018-8611",
715
738
  "CVE-2018-8639",
739
+ "CVE-2019-0543",
716
740
  "CVE-2019-0703",
741
+ "CVE-2019-0841",
717
742
  "CVE-2019-0880",
743
+ "CVE-2019-1064",
744
+ "CVE-2019-1069",
745
+ "CVE-2019-1129",
718
746
  "CVE-2019-1130",
747
+ "CVE-2019-1132",
719
748
  "CVE-2019-1253",
720
749
  "CVE-2019-1315",
721
750
  "CVE-2019-1322",
@@ -763,12 +792,15 @@
763
792
  "CVE-2021-4034",
764
793
  "CVE-2021-40450",
765
794
  "CVE-2021-41357",
795
+ "CVE-2021-41379",
766
796
  "CVE-2021-42278",
767
797
  "CVE-2021-42287",
768
798
  "CVE-2021-43226",
769
799
  "CVE-2022-0185",
770
800
  "CVE-2022-0492",
771
801
  "CVE-2022-0847",
802
+ "CVE-2022-20700",
803
+ "CVE-2022-20701",
772
804
  "CVE-2022-21919",
773
805
  "CVE-2022-21999",
774
806
  "CVE-2022-22047",
@@ -782,6 +814,7 @@
782
814
  "CVE-2022-22960",
783
815
  "CVE-2022-24521",
784
816
  "CVE-2022-2586",
817
+ "CVE-2022-26486",
785
818
  "CVE-2022-26904",
786
819
  "CVE-2022-26923",
787
820
  "CVE-2022-3075",
@@ -968,21 +1001,33 @@
968
1001
  "cve_refs": [
969
1002
  "BUG-2026-NIGHTMARE-ECLIPSE-YELLOWKEY",
970
1003
  "CVE-2011-4723",
1004
+ "CVE-2013-0625",
971
1005
  "CVE-2013-3993",
1006
+ "CVE-2013-5065",
972
1007
  "CVE-2014-0160",
973
1008
  "CVE-2015-7755",
974
1009
  "CVE-2016-11021",
975
1010
  "CVE-2016-6367",
976
1011
  "CVE-2016-7836",
977
1012
  "CVE-2017-5521",
1013
+ "CVE-2017-6077",
1014
+ "CVE-2017-6737",
1015
+ "CVE-2017-6738",
1016
+ "CVE-2017-6739",
1017
+ "CVE-2017-6740",
1018
+ "CVE-2017-6743",
1019
+ "CVE-2017-6744",
978
1020
  "CVE-2017-7921",
1021
+ "CVE-2018-0161",
979
1022
  "CVE-2018-13374",
980
1023
  "CVE-2018-5430",
1024
+ "CVE-2018-8581",
981
1025
  "CVE-2018-9276",
982
1026
  "CVE-2019-0703",
983
1027
  "CVE-2019-1003029",
984
1028
  "CVE-2019-1003030",
985
1029
  "CVE-2019-11001",
1030
+ "CVE-2019-1652",
986
1031
  "CVE-2019-19006",
987
1032
  "CVE-2019-20500",
988
1033
  "CVE-2019-6693",
@@ -998,9 +1043,13 @@
998
1043
  "CVE-2021-33044",
999
1044
  "CVE-2021-33045",
1000
1045
  "CVE-2021-40407",
1046
+ "CVE-2021-41379",
1001
1047
  "CVE-2021-42287",
1002
1048
  "CVE-2021-44207",
1003
1049
  "CVE-2022-1388",
1050
+ "CVE-2022-20701",
1051
+ "CVE-2022-20703",
1052
+ "CVE-2022-20708",
1004
1053
  "CVE-2022-22718",
1005
1054
  "CVE-2022-22948",
1006
1055
  "CVE-2022-23176",
@@ -1360,6 +1409,7 @@
1360
1409
  "Credential Access"
1361
1410
  ],
1362
1411
  "cve_refs": [
1412
+ "CVE-2018-0180",
1363
1413
  "CVE-2023-20269",
1364
1414
  "CVE-2024-20481"
1365
1415
  ]
@@ -1395,6 +1445,7 @@
1395
1445
  "cve_refs": [
1396
1446
  "CVE-2018-10561",
1397
1447
  "CVE-2020-2021",
1448
+ "CVE-2020-8218",
1398
1449
  "CVE-2022-1040",
1399
1450
  "CVE-2022-23176",
1400
1451
  "CVE-2022-42475",
@@ -1446,6 +1497,7 @@
1446
1497
  "Persistence"
1447
1498
  ],
1448
1499
  "cve_refs": [
1500
+ "CVE-2016-5195",
1449
1501
  "CVE-2022-21999",
1450
1502
  "CVE-2022-40684",
1451
1503
  "CVE-2026-63030"
@@ -1460,12 +1512,16 @@
1460
1512
  "CVE-2008-4128",
1461
1513
  "CVE-2008-4250",
1462
1514
  "CVE-2009-1151",
1515
+ "CVE-2009-3960",
1463
1516
  "CVE-2010-0738",
1464
1517
  "CVE-2010-1428",
1465
1518
  "CVE-2010-2861",
1466
1519
  "CVE-2010-4344",
1467
1520
  "CVE-2010-5330",
1468
1521
  "CVE-2012-1823",
1522
+ "CVE-2013-0625",
1523
+ "CVE-2013-0629",
1524
+ "CVE-2013-0631",
1469
1525
  "CVE-2013-2251",
1470
1526
  "CVE-2013-3993",
1471
1527
  "CVE-2013-4810",
@@ -1498,6 +1554,7 @@
1498
1554
  "CVE-2016-3427",
1499
1555
  "CVE-2016-3714",
1500
1556
  "CVE-2016-4523",
1557
+ "CVE-2016-6277",
1501
1558
  "CVE-2016-6366",
1502
1559
  "CVE-2016-6415",
1503
1560
  "CVE-2016-7836",
@@ -1506,6 +1563,7 @@
1506
1563
  "CVE-2017-1000353",
1507
1564
  "CVE-2017-11317",
1508
1565
  "CVE-2017-11357",
1566
+ "CVE-2017-12240",
1509
1567
  "CVE-2017-12615",
1510
1568
  "CVE-2017-12617",
1511
1569
  "CVE-2017-12637",
@@ -1516,15 +1574,31 @@
1516
1574
  "CVE-2017-3506",
1517
1575
  "CVE-2017-3881",
1518
1576
  "CVE-2017-5521",
1577
+ "CVE-2017-6077",
1519
1578
  "CVE-2017-6316",
1520
1579
  "CVE-2017-6334",
1580
+ "CVE-2017-6736",
1581
+ "CVE-2017-6738",
1582
+ "CVE-2017-6739",
1521
1583
  "CVE-2017-6742",
1584
+ "CVE-2017-6744",
1522
1585
  "CVE-2017-6862",
1523
1586
  "CVE-2017-6884",
1524
1587
  "CVE-2017-7494",
1525
1588
  "CVE-2017-7921",
1526
1589
  "CVE-2018-0125",
1527
1590
  "CVE-2018-0147",
1591
+ "CVE-2018-0151",
1592
+ "CVE-2018-0154",
1593
+ "CVE-2018-0155",
1594
+ "CVE-2018-0156",
1595
+ "CVE-2018-0158",
1596
+ "CVE-2018-0159",
1597
+ "CVE-2018-0172",
1598
+ "CVE-2018-0173",
1599
+ "CVE-2018-0174",
1600
+ "CVE-2018-0179",
1601
+ "CVE-2018-0180",
1528
1602
  "CVE-2018-10561",
1529
1603
  "CVE-2018-10562",
1530
1604
  "CVE-2018-11138",
@@ -1553,13 +1627,16 @@
1553
1627
  "CVE-2019-10068",
1554
1628
  "CVE-2019-11001",
1555
1629
  "CVE-2019-11043",
1630
+ "CVE-2019-11581",
1556
1631
  "CVE-2019-12989",
1557
1632
  "CVE-2019-12991",
1558
1633
  "CVE-2019-15107",
1559
1634
  "CVE-2019-15271",
1560
1635
  "CVE-2019-16057",
1561
1636
  "CVE-2019-16278",
1637
+ "CVE-2019-1652",
1562
1638
  "CVE-2019-16920",
1639
+ "CVE-2019-16928",
1563
1640
  "CVE-2019-17621",
1564
1641
  "CVE-2019-19006",
1565
1642
  "CVE-2019-20500",
@@ -1587,6 +1664,7 @@
1587
1664
  "CVE-2020-15415",
1588
1665
  "CVE-2020-1631",
1589
1666
  "CVE-2020-17519",
1667
+ "CVE-2020-1938",
1590
1668
  "CVE-2020-1956",
1591
1669
  "CVE-2020-2021",
1592
1670
  "CVE-2020-24363",
@@ -1607,6 +1685,7 @@
1607
1685
  "CVE-2020-5741",
1608
1686
  "CVE-2020-7247",
1609
1687
  "CVE-2020-7796",
1688
+ "CVE-2020-8218",
1610
1689
  "CVE-2020-9054",
1611
1690
  "CVE-2020-9377",
1612
1691
  "CVE-2021-20028",
@@ -1614,6 +1693,7 @@
1614
1693
  "CVE-2021-20123",
1615
1694
  "CVE-2021-20124",
1616
1695
  "CVE-2021-21311",
1696
+ "CVE-2021-21973",
1617
1697
  "CVE-2021-22054",
1618
1698
  "CVE-2021-22175",
1619
1699
  "CVE-2021-22681",
@@ -1653,6 +1733,9 @@
1653
1733
  "CVE-2022-1040",
1654
1734
  "CVE-2022-1388",
1655
1735
  "CVE-2022-1471",
1736
+ "CVE-2022-20699",
1737
+ "CVE-2022-20700",
1738
+ "CVE-2022-20708",
1656
1739
  "CVE-2022-20775",
1657
1740
  "CVE-2022-20821",
1658
1741
  "CVE-2022-21445",
@@ -2171,6 +2254,7 @@
2171
2254
  "CVE-2026-63077",
2172
2255
  "CVE-2026-6973",
2173
2256
  "CVE-2026-72898",
2257
+ "CVE-2026-73570",
2174
2258
  "CVE-2026-7473",
2175
2259
  "CVE-2026-7482",
2176
2260
  "CVE-2026-8037",
@@ -2389,9 +2473,11 @@
2389
2473
  "CVE-2013-3896",
2390
2474
  "CVE-2013-3918",
2391
2475
  "CVE-2014-0322",
2476
+ "CVE-2014-0496",
2392
2477
  "CVE-2014-0497",
2393
2478
  "CVE-2014-0502",
2394
2479
  "CVE-2014-0546",
2480
+ "CVE-2014-4114",
2395
2481
  "CVE-2014-4123",
2396
2482
  "CVE-2014-4148",
2397
2483
  "CVE-2014-6332",
@@ -2402,47 +2488,67 @@
2402
2488
  "CVE-2015-0310",
2403
2489
  "CVE-2015-0311",
2404
2490
  "CVE-2015-0313",
2491
+ "CVE-2015-1642",
2405
2492
  "CVE-2015-1671",
2406
2493
  "CVE-2015-1770",
2407
2494
  "CVE-2015-2419",
2495
+ "CVE-2015-2424",
2408
2496
  "CVE-2015-2425",
2409
2497
  "CVE-2015-2426",
2410
2498
  "CVE-2015-2502",
2499
+ "CVE-2015-2545",
2500
+ "CVE-2015-2546",
2501
+ "CVE-2015-2590",
2502
+ "CVE-2015-3043",
2411
2503
  "CVE-2015-3113",
2504
+ "CVE-2015-5119",
2412
2505
  "CVE-2015-5122",
2413
2506
  "CVE-2015-5123",
2507
+ "CVE-2015-7645",
2414
2508
  "CVE-2015-8651",
2415
2509
  "CVE-2016-0034",
2416
2510
  "CVE-2016-0189",
2417
2511
  "CVE-2016-0984",
2418
2512
  "CVE-2016-1010",
2513
+ "CVE-2016-1019",
2419
2514
  "CVE-2016-1646",
2420
2515
  "CVE-2016-3393",
2516
+ "CVE-2016-4117",
2421
2517
  "CVE-2016-4171",
2422
2518
  "CVE-2016-4657",
2423
2519
  "CVE-2016-5198",
2520
+ "CVE-2016-7193",
2424
2521
  "CVE-2016-7200",
2425
2522
  "CVE-2016-7201",
2426
2523
  "CVE-2016-7256",
2524
+ "CVE-2016-7855",
2427
2525
  "CVE-2016-7892",
2428
2526
  "CVE-2016-9079",
2429
2527
  "CVE-2017-0022",
2430
2528
  "CVE-2017-0037",
2431
2529
  "CVE-2017-0059",
2432
2530
  "CVE-2017-0149",
2531
+ "CVE-2017-0261",
2532
+ "CVE-2017-11292",
2533
+ "CVE-2017-11826",
2433
2534
  "CVE-2017-5030",
2434
2535
  "CVE-2017-5070",
2435
2536
  "CVE-2017-8291",
2537
+ "CVE-2017-8540",
2436
2538
  "CVE-2018-0824",
2437
2539
  "CVE-2018-17463",
2438
2540
  "CVE-2018-17480",
2439
2541
  "CVE-2018-4990",
2440
2542
  "CVE-2018-5002",
2441
2543
  "CVE-2018-6065",
2544
+ "CVE-2018-8120",
2545
+ "CVE-2018-8298",
2546
+ "CVE-2018-8373",
2442
2547
  "CVE-2019-0880",
2443
2548
  "CVE-2019-0903",
2444
2549
  "CVE-2019-11707",
2445
2550
  "CVE-2019-11708",
2551
+ "CVE-2019-1297",
2446
2552
  "CVE-2019-13720",
2447
2553
  "CVE-2019-18426",
2448
2554
  "CVE-2019-3568",
@@ -2464,6 +2570,8 @@
2464
2570
  "CVE-2022-21971",
2465
2571
  "CVE-2022-22675",
2466
2572
  "CVE-2022-2294",
2573
+ "CVE-2022-26485",
2574
+ "CVE-2022-26486",
2467
2575
  "CVE-2022-30190",
2468
2576
  "CVE-2022-3038",
2469
2577
  "CVE-2022-3075",
@@ -2712,6 +2820,7 @@
2712
2820
  "CVE-2010-0738",
2713
2821
  "CVE-2010-1428",
2714
2822
  "CVE-2016-0034",
2823
+ "CVE-2016-1019",
2715
2824
  "CVE-2017-0148",
2716
2825
  "CVE-2017-18362",
2717
2826
  "CVE-2018-19949",
@@ -3031,6 +3140,7 @@
3031
3140
  "name": "Unsecured Credentials: Credentials In Files",
3032
3141
  "version": "v19",
3033
3142
  "cve_refs": [
3143
+ "CVE-2009-3960",
3034
3144
  "CVE-2010-2861",
3035
3145
  "CVE-2011-4723",
3036
3146
  "CVE-2014-0130",
@@ -3043,7 +3153,9 @@
3043
3153
  "CVE-2018-18809",
3044
3154
  "CVE-2018-5430",
3045
3155
  "CVE-2019-1003030",
3156
+ "CVE-2019-1652",
3046
3157
  "CVE-2020-1631",
3158
+ "CVE-2020-1938",
3047
3159
  "CVE-2023-22952",
3048
3160
  "CVE-2024-48248",
3049
3161
  "CVE-2024-6587",
@@ -3135,6 +3247,7 @@
3135
3247
  "name": "Compromise Host Software Binary",
3136
3248
  "version": "v19",
3137
3249
  "cve_refs": [
3250
+ "CVE-2022-20703",
3138
3251
  "CVE-2022-27518",
3139
3252
  "CVE-2022-42475",
3140
3253
  "CVE-2024-3094",
@@ -3326,10 +3439,21 @@
3326
3439
  "CVE-2012-0754",
3327
3440
  "CVE-2012-2539",
3328
3441
  "CVE-2013-1331",
3442
+ "CVE-2014-0496",
3443
+ "CVE-2015-1642",
3329
3444
  "CVE-2015-1770",
3445
+ "CVE-2015-2424",
3446
+ "CVE-2015-2545",
3447
+ "CVE-2015-2546",
3448
+ "CVE-2016-7193",
3449
+ "CVE-2016-7262",
3450
+ "CVE-2017-0261",
3451
+ "CVE-2017-8540",
3330
3452
  "CVE-2018-4990",
3453
+ "CVE-2018-8373",
3331
3454
  "CVE-2018-8414",
3332
3455
  "CVE-2019-0903",
3456
+ "CVE-2019-1297",
3333
3457
  "CVE-2021-38406",
3334
3458
  "CVE-2022-30190",
3335
3459
  "CVE-2022-30333",
@@ -3626,6 +3750,7 @@
3626
3750
  ],
3627
3751
  "cve_refs": [
3628
3752
  "CVE-2013-2094",
3753
+ "CVE-2016-5195",
3629
3754
  "CVE-2021-22600",
3630
3755
  "CVE-2022-0492",
3631
3756
  "CVE-2024-0132",
@@ -3979,6 +4104,8 @@
3979
4104
  "name": "Data from Local System",
3980
4105
  "version": "v19",
3981
4106
  "cve_refs": [
4107
+ "CVE-2009-3960",
4108
+ "CVE-2013-0631",
3982
4109
  "CVE-2013-3993",
3983
4110
  "CVE-2014-0130",
3984
4111
  "CVE-2015-0666",
@@ -4080,19 +4207,26 @@
4080
4207
  "CVE-2015-2419",
4081
4208
  "CVE-2015-2425",
4082
4209
  "CVE-2015-2502",
4210
+ "CVE-2015-2590",
4211
+ "CVE-2015-3043",
4083
4212
  "CVE-2015-3113",
4084
4213
  "CVE-2015-4495",
4214
+ "CVE-2015-4902",
4215
+ "CVE-2015-5119",
4085
4216
  "CVE-2015-5122",
4086
4217
  "CVE-2015-5123",
4218
+ "CVE-2015-7645",
4087
4219
  "CVE-2015-8651",
4088
4220
  "CVE-2016-0034",
4089
4221
  "CVE-2016-0162",
4090
4222
  "CVE-2016-0189",
4091
4223
  "CVE-2016-0984",
4092
4224
  "CVE-2016-1010",
4225
+ "CVE-2016-1019",
4093
4226
  "CVE-2016-1646",
4094
4227
  "CVE-2016-3298",
4095
4228
  "CVE-2016-3351",
4229
+ "CVE-2016-4117",
4096
4230
  "CVE-2016-4171",
4097
4231
  "CVE-2016-4656",
4098
4232
  "CVE-2016-4657",
@@ -4100,6 +4234,7 @@
4100
4234
  "CVE-2016-7200",
4101
4235
  "CVE-2016-7201",
4102
4236
  "CVE-2016-7256",
4237
+ "CVE-2016-7855",
4103
4238
  "CVE-2016-7892",
4104
4239
  "CVE-2016-9079",
4105
4240
  "CVE-2017-0022",
@@ -4112,6 +4247,8 @@
4112
4247
  "CVE-2018-17463",
4113
4248
  "CVE-2018-17480",
4114
4249
  "CVE-2018-6065",
4250
+ "CVE-2018-8298",
4251
+ "CVE-2018-8373",
4115
4252
  "CVE-2019-0676",
4116
4253
  "CVE-2019-13720",
4117
4254
  "CVE-2019-5786",
@@ -4125,6 +4262,7 @@
4125
4262
  "CVE-2022-1096",
4126
4263
  "CVE-2022-1364",
4127
4264
  "CVE-2022-2294",
4265
+ "CVE-2022-26485",
4128
4266
  "CVE-2022-2856",
4129
4267
  "CVE-2022-3038",
4130
4268
  "CVE-2022-3075",
@@ -4236,6 +4374,7 @@
4236
4374
  "name": "Endpoint Denial of Service: OS Exhaustion Flood",
4237
4375
  "version": "v19",
4238
4376
  "cve_refs": [
4377
+ "CVE-2017-12238",
4239
4378
  "CVE-2023-44487",
4240
4379
  "CVE-2025-8671"
4241
4380
  ],
@@ -4421,7 +4560,16 @@
4421
4560
  "CVE-2004-1464",
4422
4561
  "CVE-2015-4068",
4423
4562
  "CVE-2016-4523",
4563
+ "CVE-2016-8562",
4564
+ "CVE-2017-12231",
4565
+ "CVE-2017-12232",
4566
+ "CVE-2017-12233",
4567
+ "CVE-2017-12235",
4568
+ "CVE-2017-6627",
4569
+ "CVE-2017-6740",
4424
4570
  "CVE-2018-0125",
4571
+ "CVE-2019-16928",
4572
+ "CVE-2020-11899",
4425
4573
  "CVE-2021-25489",
4426
4574
  "CVE-2023-20109",
4427
4575
  "CVE-2023-29552",
@@ -4912,8 +5060,15 @@
4912
5060
  "cve_refs": [
4913
5061
  "CVE-2015-1427",
4914
5062
  "CVE-2017-0147",
5063
+ "CVE-2017-12233",
5064
+ "CVE-2017-12234",
5065
+ "CVE-2017-6743",
4915
5066
  "CVE-2017-6862",
5067
+ "CVE-2018-0156",
5068
+ "CVE-2018-0159",
4916
5069
  "CVE-2019-2616",
5070
+ "CVE-2020-11899",
5071
+ "CVE-2021-21973",
4917
5072
  "CVE-2022-20821",
4918
5073
  "CVE-2022-24706",
4919
5074
  "CVE-2026-34486"
@@ -5276,6 +5431,7 @@
5276
5431
  "is_subtechnique": false,
5277
5432
  "cve_refs": [
5278
5433
  "CVE-2010-2861",
5434
+ "CVE-2013-0629",
5279
5435
  "CVE-2013-3993",
5280
5436
  "CVE-2013-7331",
5281
5437
  "CVE-2015-4068",
@@ -5500,6 +5656,7 @@
5500
5656
  "is_subtechnique": false,
5501
5657
  "cve_refs": [
5502
5658
  "CVE-2014-0502",
5659
+ "CVE-2014-4114",
5503
5660
  "CVE-2015-1187",
5504
5661
  "CVE-2015-2502",
5505
5662
  "CVE-2017-11357",
@@ -5868,7 +6025,9 @@
5868
6025
  "cve_refs": [
5869
6026
  "CVE-2016-0151",
5870
6027
  "CVE-2017-0005",
6028
+ "CVE-2019-0543",
5871
6029
  "CVE-2019-0880",
6030
+ "CVE-2019-1132",
5872
6031
  "CVE-2023-29336"
5873
6032
  ]
5874
6033
  },
@@ -6169,6 +6328,7 @@
6169
6328
  "stix_id": "attack-pattern--8c32eb4d-805f-4fc5-bf60-c4d476c131b5",
6170
6329
  "is_subtechnique": false,
6171
6330
  "cve_refs": [
6331
+ "CVE-2018-0175",
6172
6332
  "CVE-2023-32046",
6173
6333
  "CVE-2023-35311",
6174
6334
  "CVE-2024-0129",
@@ -6262,11 +6422,22 @@
6262
6422
  "CVE-2017-0146",
6263
6423
  "CVE-2017-0147",
6264
6424
  "CVE-2017-0148",
6425
+ "CVE-2017-12240",
6265
6426
  "CVE-2017-3881",
6427
+ "CVE-2017-6736",
6428
+ "CVE-2017-6737",
6429
+ "CVE-2017-6738",
6430
+ "CVE-2017-6739",
6431
+ "CVE-2017-6740",
6266
6432
  "CVE-2017-6742",
6433
+ "CVE-2017-6743",
6434
+ "CVE-2017-6744",
6267
6435
  "CVE-2017-6862",
6268
6436
  "CVE-2017-7494",
6269
6437
  "CVE-2017-8543",
6438
+ "CVE-2018-0151",
6439
+ "CVE-2018-0167",
6440
+ "CVE-2018-0175",
6270
6441
  "CVE-2018-7445",
6271
6442
  "CVE-2019-0703",
6272
6443
  "CVE-2021-20028",
@@ -6274,6 +6445,7 @@
6274
6445
  "CVE-2021-27877",
6275
6446
  "CVE-2021-27878",
6276
6447
  "CVE-2021-31166",
6448
+ "CVE-2022-20699",
6277
6449
  "CVE-2022-26501",
6278
6450
  "CVE-2022-40765",
6279
6451
  "CVE-2022-41223",
@@ -6316,6 +6488,9 @@
6316
6488
  "CVE-2013-2465",
6317
6489
  "CVE-2015-0071",
6318
6490
  "CVE-2015-0310",
6491
+ "CVE-2015-2387",
6492
+ "CVE-2015-4902",
6493
+ "CVE-2017-8540",
6319
6494
  "CVE-2018-4344",
6320
6495
  "CVE-2019-11708",
6321
6496
  "CVE-2019-7286",
@@ -6326,6 +6501,7 @@
6326
6501
  "CVE-2021-31010",
6327
6502
  "CVE-2022-22674",
6328
6503
  "CVE-2022-22675",
6504
+ "CVE-2022-26486",
6329
6505
  "CVE-2022-32894",
6330
6506
  "CVE-2022-4135",
6331
6507
  "CVE-2022-42827",
@@ -6414,6 +6590,7 @@
6414
6590
  "stix_id": "attack-pattern--457c7820-d331-465a-915e-42f85500ccc4",
6415
6591
  "is_subtechnique": false,
6416
6592
  "cve_refs": [
6593
+ "CVE-2014-4114",
6417
6594
  "CVE-2024-38112",
6418
6595
  "CVE-2025-26633"
6419
6596
  ]
@@ -7480,6 +7657,10 @@
7480
7657
  "is_subtechnique": false,
7481
7658
  "cve_refs": [
7482
7659
  "CVE-2017-3881",
7660
+ "CVE-2017-6737",
7661
+ "CVE-2017-6738",
7662
+ "CVE-2017-6740",
7663
+ "CVE-2017-6744",
7483
7664
  "CVE-2018-6961"
7484
7665
  ]
7485
7666
  },
@@ -10134,7 +10315,8 @@
10134
10315
  "_auto_imported": true,
10135
10316
  "_intake_method": "mitre-attack-stix",
10136
10317
  "cve_refs": [
10137
- "CVE-2018-8440"
10318
+ "CVE-2018-8440",
10319
+ "CVE-2019-1069"
10138
10320
  ]
10139
10321
  },
10140
10322
  "T1053.006": {
@@ -10719,7 +10901,9 @@
10719
10901
  "CVE-2016-10174",
10720
10902
  "CVE-2016-11021",
10721
10903
  "CVE-2016-1555",
10904
+ "CVE-2016-6277",
10722
10905
  "CVE-2017-15944",
10906
+ "CVE-2017-6077",
10723
10907
  "CVE-2017-8291",
10724
10908
  "CVE-2018-0125",
10725
10909
  "CVE-2018-0147",
@@ -10737,7 +10921,9 @@
10737
10921
  "CVE-2019-12991",
10738
10922
  "CVE-2019-15107",
10739
10923
  "CVE-2019-16057",
10924
+ "CVE-2019-1652",
10740
10925
  "CVE-2019-16920",
10926
+ "CVE-2019-16928",
10741
10927
  "CVE-2019-3929",
10742
10928
  "CVE-2019-6340",
10743
10929
  "CVE-2020-1956",
@@ -10746,9 +10932,14 @@
10746
10932
  "CVE-2020-7247",
10747
10933
  "CVE-2020-9054",
10748
10934
  "CVE-2020-9377",
10935
+ "CVE-2021-41379",
10749
10936
  "CVE-2021-45382",
10750
10937
  "CVE-2022-0543",
10751
10938
  "CVE-2022-1388",
10939
+ "CVE-2022-20699",
10940
+ "CVE-2022-20700",
10941
+ "CVE-2022-20701",
10942
+ "CVE-2022-20708",
10752
10943
  "CVE-2022-22947",
10753
10944
  "CVE-2022-22954",
10754
10945
  "CVE-2022-22963",
@@ -10768,6 +10959,7 @@
10768
10959
  "CVE-2022-44877",
10769
10960
  "CVE-2022-46169",
10770
10961
  "CVE-2026-34486",
10962
+ "CVE-2026-73570",
10771
10963
  "CVE-2026-8037"
10772
10964
  ]
10773
10965
  },
@@ -10799,6 +10991,7 @@
10799
10991
  "_intake_method": "mitre-attack-stix",
10800
10992
  "cve_refs": [
10801
10993
  "CVE-2014-6332",
10994
+ "CVE-2018-8373",
10802
10995
  "CVE-2023-21715"
10803
10996
  ]
10804
10997
  },
@@ -12046,7 +12239,10 @@
12046
12239
  "stix_id": "attack-pattern--b4694861-542c-48ea-9eb1-10d356e7140a",
12047
12240
  "last_verified": "2026-05-19",
12048
12241
  "_auto_imported": true,
12049
- "_intake_method": "mitre-attack-stix"
12242
+ "_intake_method": "mitre-attack-stix",
12243
+ "cve_refs": [
12244
+ "CVE-2018-8581"
12245
+ ]
12050
12246
  },
12051
12247
  "T1114.003": {
12052
12248
  "id": "T1114.003",
@@ -12236,7 +12432,9 @@
12236
12432
  "_auto_imported": true,
12237
12433
  "_intake_method": "mitre-attack-stix",
12238
12434
  "cve_refs": [
12435
+ "CVE-2015-1701",
12239
12436
  "CVE-2016-0040",
12437
+ "CVE-2016-0099",
12240
12438
  "CVE-2016-0151",
12241
12439
  "CVE-2022-24521",
12242
12440
  "CVE-2022-37969",
@@ -12659,6 +12857,7 @@
12659
12857
  "CVE-2019-0676",
12660
12858
  "CVE-2019-0903",
12661
12859
  "CVE-2019-11707",
12860
+ "CVE-2020-8218",
12662
12861
  "CVE-2021-1789",
12663
12862
  "CVE-2021-30533",
12664
12863
  "CVE-2022-27926",
@@ -12713,18 +12912,33 @@
12713
12912
  "CVE-2013-1331",
12714
12913
  "CVE-2013-2729",
12715
12914
  "CVE-2013-6282",
12915
+ "CVE-2014-0496",
12716
12916
  "CVE-2014-0546",
12717
12917
  "CVE-2014-4077",
12918
+ "CVE-2014-4114",
12718
12919
  "CVE-2014-4148",
12920
+ "CVE-2015-1642",
12719
12921
  "CVE-2015-1671",
12720
12922
  "CVE-2015-1770",
12923
+ "CVE-2015-2424",
12924
+ "CVE-2015-2545",
12925
+ "CVE-2015-5119",
12721
12926
  "CVE-2015-6175",
12927
+ "CVE-2016-3309",
12928
+ "CVE-2016-7193",
12722
12929
  "CVE-2016-7201",
12723
12930
  "CVE-2016-7256",
12931
+ "CVE-2016-7262",
12932
+ "CVE-2017-0101",
12933
+ "CVE-2017-0261",
12934
+ "CVE-2017-11292",
12935
+ "CVE-2017-11826",
12724
12936
  "CVE-2018-4344",
12725
12937
  "CVE-2018-4990",
12726
12938
  "CVE-2018-5002",
12939
+ "CVE-2018-8120",
12727
12940
  "CVE-2018-8414",
12941
+ "CVE-2019-1297",
12728
12942
  "CVE-2019-8605",
12729
12943
  "CVE-2020-28949",
12730
12944
  "CVE-2020-3837",
@@ -14042,7 +14256,10 @@
14042
14256
  "stix_id": "attack-pattern--18cffc21-3260-437e-80e4-4ab8bf2ba5e9",
14043
14257
  "last_verified": "2026-05-19",
14044
14258
  "_auto_imported": true,
14045
- "_intake_method": "mitre-attack-stix"
14259
+ "_intake_method": "mitre-attack-stix",
14260
+ "cve_refs": [
14261
+ "CVE-2017-12237"
14262
+ ]
14046
14263
  },
14047
14264
  "T1499.004": {
14048
14265
  "id": "T1499.004",
@@ -14075,6 +14292,31 @@
14075
14292
  "CVE-2009-2055",
14076
14293
  "CVE-2010-3035",
14077
14294
  "CVE-2016-4523",
14295
+ "CVE-2017-12231",
14296
+ "CVE-2017-12232",
14297
+ "CVE-2017-12233",
14298
+ "CVE-2017-12234",
14299
+ "CVE-2017-12235",
14300
+ "CVE-2017-12237",
14301
+ "CVE-2017-12238",
14302
+ "CVE-2017-12319",
14303
+ "CVE-2017-6627",
14304
+ "CVE-2017-6663",
14305
+ "CVE-2017-6739",
14306
+ "CVE-2018-0151",
14307
+ "CVE-2018-0154",
14308
+ "CVE-2018-0155",
14309
+ "CVE-2018-0156",
14310
+ "CVE-2018-0158",
14311
+ "CVE-2018-0159",
14312
+ "CVE-2018-0161",
14313
+ "CVE-2018-0167",
14314
+ "CVE-2018-0172",
14315
+ "CVE-2018-0173",
14316
+ "CVE-2018-0174",
14317
+ "CVE-2018-0175",
14318
+ "CVE-2018-0179",
14319
+ "CVE-2018-0180",
14078
14320
  "CVE-2020-5135",
14079
14321
  "CVE-2021-31166",
14080
14322
  "CVE-2026-20349"
@@ -14177,6 +14419,7 @@
14177
14419
  "CVE-2019-10068",
14178
14420
  "CVE-2019-6340",
14179
14421
  "CVE-2020-14644",
14422
+ "CVE-2020-1938",
14180
14423
  "CVE-2020-28949",
14181
14424
  "CVE-2020-36193",
14182
14425
  "CVE-2021-22941",
@@ -14249,7 +14492,8 @@
14249
14492
  "CVE-2026-56291",
14250
14493
  "CVE-2026-58644",
14251
14494
  "CVE-2026-63030",
14252
- "CVE-2026-63077"
14495
+ "CVE-2026-63077",
14496
+ "CVE-2026-73570"
14253
14497
  ]
14254
14498
  },
14255
14499
  "T1505.004": {
@@ -16425,6 +16669,7 @@
16425
16669
  "_auto_imported": true,
16426
16670
  "_intake_method": "mitre-attack-stix",
16427
16671
  "cve_refs": [
16672
+ "CVE-2018-8581",
16428
16673
  "CVE-2022-26925",
16429
16674
  "CVE-2023-23397",
16430
16675
  "CVE-2025-33073"
@@ -17338,7 +17583,10 @@
17338
17583
  "stix_id": "attack-pattern--d0613359-5781-4fd2-b5be-c269270be1f6",
17339
17584
  "last_verified": "2026-05-19",
17340
17585
  "_auto_imported": true,
17341
- "_intake_method": "mitre-attack-stix"
17586
+ "_intake_method": "mitre-attack-stix",
17587
+ "cve_refs": [
17588
+ "CVE-2017-12319"
17589
+ ]
17342
17590
  },
17343
17591
  "T1565.003": {
17344
17592
  "id": "T1565.003",
@@ -19943,6 +20191,7 @@
19943
20191
  "_intake_method": "mitre-attack-stix",
19944
20192
  "cve_refs": [
19945
20193
  "CVE-2016-6366",
20194
+ "CVE-2022-20703",
19946
20195
  "CVE-2022-27518",
19947
20196
  "CVE-2022-41328"
19948
20197
  ]
@@ -19995,7 +20244,13 @@
19995
20244
  "stix_id": "attack-pattern--ee7ff928-801c-4f34-8a99-3df965e581a5",
19996
20245
  "last_verified": "2026-05-19",
19997
20246
  "_auto_imported": true,
19998
- "_intake_method": "mitre-attack-stix"
20247
+ "_intake_method": "mitre-attack-stix",
20248
+ "cve_refs": [
20249
+ "CVE-2017-6736",
20250
+ "CVE-2017-6737",
20251
+ "CVE-2017-6743",
20252
+ "CVE-2018-0161"
20253
+ ]
19999
20254
  },
20000
20255
  "T1602.002": {
20001
20256
  "id": "T1602.002",
@@ -20729,7 +20984,12 @@
20729
20984
  "last_verified": "2026-05-19",
20730
20985
  "_auto_imported": true,
20731
20986
  "_intake_method": "mitre-ics-attack-stix",
20732
- "_matrix": "ics-attack"
20987
+ "_matrix": "ics-attack",
20988
+ "cve_refs": [
20989
+ "CVE-2016-8562",
20990
+ "CVE-2017-12234",
20991
+ "CVE-2017-12235"
20992
+ ]
20733
20993
  },
20734
20994
  "T0894": {
20735
20995
  "id": "T0894",