@blamejs/exceptd-skills 0.21.0 → 0.21.2

package/data/cwe-catalog.json

@@ -1783,6 +1783,7 @@
       "CVE-2021-25395",
       "CVE-2022-26904",
       "CVE-2023-36884",
+      "CVE-2025-39964",
       "CVE-2025-62215",
       "CVE-2026-31635",
       "CVE-2026-33825",
@@ -2599,6 +2600,7 @@
       "CVE-2026-42945",
       "CVE-2026-43500",
       "CVE-2026-46300",
+      "CVE-2026-53266",
       "CVE-2026-53362",
       "CVE-2026-87491"
     ],
@@ -3514,7 +3516,8 @@
       "CVE-2025-20352",
       "CVE-2025-22457",
       "CVE-2025-42599",
-      "CVE-2025-53521"
+      "CVE-2025-53521",
+      "CVE-2026-7273"
     ],
     "last_verified": "2026-05-18",
     "notes": "Added v0.13.17 KEV bulk-import."
@@ -5038,7 +5041,8 @@
       "CVE-2021-3560",
       "CVE-2023-41992",
       "CVE-2023-41993",
-      "CVE-2024-3393"
+      "CVE-2024-3393",
+      "CVE-2025-39682"
     ],
     "last_verified": "2026-05-19",
     "notes": "Bulk-imported v0.13.18 from the canonical MITRE Top 25 + commonly-referenced-class expansion.",

package/data/exploit-availability.json

@@ -46,7 +46,7 @@
     "poc_description": "Single-stage deterministic root escalation script, reported as 732 bytes. No race condition. Requires unprivileged local code execution.",
     "weaponization_stage": "fully_weaponized",
     "ai_discovery_confirmed": true,
-    "ai_discovery_source": "vendor_research",
+    "ai_discovery_source": "bug_bounty_ai_augmented",
     "ai_assist_factor": "very_high",
     "ai_discovery_notes": "Researcher reports AI system discovery in approximately 1 hour via automated vulnerability analysis",
     "metasploit_module": "unknown",
@@ -111,7 +111,7 @@
     "poc_description": "84 malicious versions published across 42 @tanstack/* packages 2026-05-11 — the worm itself IS the PoC. Payload analysis published by multiple researchers within 20 minutes; SHA-256 anchors and C2 infrastructure documented in cve-catalog.json iocs block.",
     "weaponization_stage": "fully_weaponized",
     "ai_discovery_confirmed": false,
-    "ai_discovery_source": "threat_actor_ai_built",
+    "ai_discovery_source": "human_researcher",
     "ai_assist_factor": "low",
     "ai_assisted_weaponization": false,
     "exploit_complexity": "high",
@@ -185,7 +185,7 @@
     "poc_description": "Public PoC demonstrates kernel-module load via crafted pod spec — attacker controls modprobe argument path.",
     "weaponization_stage": "demonstrated",
     "ai_discovery_confirmed": false,
-    "ai_discovery_source": "human_researcher",
+    "ai_discovery_source": "vendor_research",
     "ai_assist_factor": "low",
     "ai_assisted_weaponization": false,
     "exploit_complexity": "low",
@@ -198,7 +198,7 @@
     "poc_description": "Protect AI Huntr submission — single-request path-traversal against the MLflow artifact-fetch endpoint.",
     "weaponization_stage": "demonstrated",
     "ai_discovery_confirmed": false,
-    "ai_discovery_source": "bug_bounty_ai_augmented",
+    "ai_discovery_source": "human_researcher",
     "ai_assist_factor": "moderate",
     "ai_assisted_weaponization": false,
     "exploit_complexity": "low",
@@ -238,7 +238,7 @@
     "poc_description": "/SetupWizard.aspx/anything one-liner auth bypass; public PoC and Metasploit module within 48 hours of disclosure.",
     "weaponization_stage": "fully_weaponized",
     "ai_discovery_confirmed": false,
-    "ai_discovery_source": "human_researcher",
+    "ai_discovery_source": "vendor_research",
     "ai_assist_factor": "low",
     "ai_assisted_weaponization": false,
     "metasploit_module": "exploit/multi/http/connectwise_screenconnect_auth_bypass",
@@ -252,7 +252,7 @@
     "poc_description": "No public PoC at KEV-listing 2026-05-14. Cisco vendor advisory references observed exploitation by named threat group.",
     "weaponization_stage": "fully_weaponized",
     "ai_discovery_confirmed": false,
-    "ai_discovery_source": "unknown",
+    "ai_discovery_source": "human_researcher",
     "ai_assist_factor": "low",
     "ai_assisted_weaponization": false,
     "exploit_complexity": "low",
@@ -292,7 +292,7 @@
     "poc_description": "Public advisory documents the argv-string concatenation in MCP-client stdio transport; researcher-published PoC chains operator-config to shell-meta injection.",
     "weaponization_stage": "demonstrated",
     "ai_discovery_confirmed": false,
-    "ai_discovery_source": "unknown",
+    "ai_discovery_source": "human_researcher",
     "ai_assist_factor": "low",
     "ai_assisted_weaponization": false,
     "exploit_complexity": "low",
@@ -383,7 +383,7 @@
     "poc_description": "depthfirst-disclosure published PoC at https://github.com/depthfirstdisclosures/nginx-rift — heap buffer overflow in rewrite-directive PCRE unnamed-capture handling. Single HTTP request, no auth.",
     "weaponization_stage": "fully_weaponized",
     "ai_discovery_confirmed": true,
-    "ai_discovery_source": "academic_ai_fuzzing",
+    "ai_discovery_source": "bug_bounty_ai_augmented",
     "ai_assist_factor": "very_high",
     "ai_discovery_notes": "First publicly-attributed AI-discovered nginx CVE. Discovery by depthfirst autonomous-analysis platform on a code path present in every nginx release for 18 years.",
     "ai_assisted_weaponization": false,

package/data/framework-control-gaps.json

@@ -1858,6 +1858,8 @@
       "CVE-2025-38352",
       "CVE-2025-3928",
       "CVE-2025-3935",
+      "CVE-2025-39682",
+      "CVE-2025-39964",
       "CVE-2025-4008",
       "CVE-2025-40536",
       "CVE-2025-40551",
@@ -2063,6 +2065,7 @@
       "CVE-2026-48908",
       "CVE-2026-50522",
       "CVE-2026-50751",
+      "CVE-2026-53266",
       "CVE-2026-53362",
       "CVE-2026-54420",
       "CVE-2026-55040",
@@ -2087,6 +2090,7 @@
       "CVE-2026-6973",
       "CVE-2026-72529",
       "CVE-2026-72530",
+      "CVE-2026-7273",
       "CVE-2026-72898",
       "CVE-2026-73570",
       "CVE-2026-7473",
@@ -4391,6 +4395,8 @@
       "CVE-2025-38352",
       "CVE-2025-3928",
       "CVE-2025-3935",
+      "CVE-2025-39682",
+      "CVE-2025-39964",
       "CVE-2025-4008",
       "CVE-2025-40536",
       "CVE-2025-40551",
@@ -4588,6 +4594,7 @@
       "CVE-2026-50522",
       "CVE-2026-50751",
       "CVE-2026-5281",
+      "CVE-2026-53266",
       "CVE-2026-53362",
       "CVE-2026-54420",
       "CVE-2026-56291",
@@ -4602,6 +4609,7 @@
       "CVE-2026-68820",
       "CVE-2026-72529",
       "CVE-2026-72530",
+      "CVE-2026-7273",
       "CVE-2026-73570",
       "CVE-2026-76460",
       "CVE-2026-8037",
@@ -5468,6 +5476,8 @@
       "CVE-2025-33236",
       "CVE-2025-34291",
       "CVE-2025-38352",
+      "CVE-2025-39682",
+      "CVE-2025-39964",
       "CVE-2025-41244",
       "CVE-2025-43300",
       "CVE-2025-43510",
@@ -5554,6 +5564,7 @@
       "CVE-2026-46333",
       "CVE-2026-50522",
       "CVE-2026-5281",
+      "CVE-2026-53266",
       "CVE-2026-53362",
       "CVE-2026-58644",
       "CVE-2026-59822",
@@ -5997,6 +6008,7 @@
       "CVE-2025-27520",
       "CVE-2025-3248",
       "CVE-2025-3466",
+      "CVE-2025-39682",
       "CVE-2025-47729",
       "CVE-2025-49844",
       "CVE-2025-53773",
@@ -6009,6 +6021,7 @@
       "CVE-2026-42271",
       "CVE-2026-45247",
       "CVE-2026-48172",
+      "CVE-2026-53266",
       "CVE-2026-56290",
       "CVE-2026-60004",
       "CVE-2026-67277",
@@ -6156,6 +6169,7 @@
       "CVE-2024-21626",
       "CVE-2025-22224",
       "CVE-2025-22225",
+      "CVE-2025-39964",
       "CVE-2025-68668",
       "CVE-2026-48172",
       "CVE-2026-85880"
@@ -6476,6 +6490,7 @@
     "evidence_cves": [
       "CVE-2014-0160",
       "CVE-2022-27924",
+      "CVE-2025-39682",
       "CVE-2025-47729",
       "CVE-2026-34486",
       "CVE-2026-43284",
@@ -7735,6 +7750,8 @@
       "CVE-2025-38352",
       "CVE-2025-3928",
       "CVE-2025-3935",
+      "CVE-2025-39682",
+      "CVE-2025-39964",
       "CVE-2025-4008",
       "CVE-2025-40536",
       "CVE-2025-40551",
@@ -7937,6 +7954,7 @@
       "CVE-2026-50522",
       "CVE-2026-50751",
       "CVE-2026-5281",
+      "CVE-2026-53266",
       "CVE-2026-53362",
       "CVE-2026-54420",
       "CVE-2026-56164",
@@ -7951,6 +7969,7 @@
       "CVE-2026-68820",
       "CVE-2026-6973",
       "CVE-2026-72529",
+      "CVE-2026-7273",
       "CVE-2026-72898",
       "CVE-2026-73570",
       "CVE-2026-7473",
@@ -13229,6 +13248,8 @@
       "CVE-2025-37164",
       "CVE-2025-38352",
       "CVE-2025-3928",
+      "CVE-2025-39682",
+      "CVE-2025-39964",
       "CVE-2025-4008",
       "CVE-2025-40551",
       "CVE-2025-41244",
@@ -13422,6 +13443,7 @@
       "CVE-2026-48939",
       "CVE-2026-50522",
       "CVE-2026-5281",
+      "CVE-2026-53266",
       "CVE-2026-53362",
       "CVE-2026-54420",
       "CVE-2026-56164",
@@ -13439,6 +13461,7 @@
       "CVE-2026-68820",
       "CVE-2026-6973",
       "CVE-2026-72530",
+      "CVE-2026-7273",
       "CVE-2026-72898",
       "CVE-2026-7473",
       "CVE-2026-7482",
@@ -14475,6 +14498,7 @@
       "CVE-2026-50751",
       "CVE-2026-56290",
       "CVE-2026-5760",
+      "CVE-2026-7273",
       "CVE-2026-7473",
       "CVE-2026-76460",
       "CVE-2026-76461",
@@ -16639,6 +16663,7 @@
       "CVE-2024-49039",
       "CVE-2025-25249",
       "CVE-2026-20349",
+      "CVE-2026-53266",
       "CVE-2026-81963"
     ],
     "theater_test": {