@blamejs/exceptd-skills 0.21.1 → 0.21.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (12) hide show
  1. package/CHANGELOG.md +17 -0
  2. package/data/_indexes/_meta.json +5 -5
  3. package/data/cve-catalog.json +421 -401
  4. package/data/exploit-availability.json +8 -8
  5. package/data/zeroday-lessons.json +969 -669
  6. package/lib/cve-batch.js +10 -2
  7. package/lib/cve-enrich.js +2 -2
  8. package/lib/schemas/cve-catalog.schema.json +1 -1
  9. package/lib/validate-cve-catalog.js +27 -0
  10. package/manifest.json +53 -53
  11. package/package.json +1 -1
  12. package/sbom.cdx.json +27 -27
package/data/exploit-availability.json CHANGED
@@ -46,7 +46,7 @@
46
46
  "poc_description": "Single-stage deterministic root escalation script, reported as 732 bytes. No race condition. Requires unprivileged local code execution.",
47
47
  "weaponization_stage": "fully_weaponized",
48
48
  "ai_discovery_confirmed": true,
49
- "ai_discovery_source": "vendor_research",
49
+ "ai_discovery_source": "bug_bounty_ai_augmented",
50
50
  "ai_assist_factor": "very_high",
51
51
  "ai_discovery_notes": "Researcher reports AI system discovery in approximately 1 hour via automated vulnerability analysis",
52
52
  "metasploit_module": "unknown",
@@ -111,7 +111,7 @@
111
111
  "poc_description": "84 malicious versions published across 42 @tanstack/* packages 2026-05-11 — the worm itself IS the PoC. Payload analysis published by multiple researchers within 20 minutes; SHA-256 anchors and C2 infrastructure documented in cve-catalog.json iocs block.",
112
112
  "weaponization_stage": "fully_weaponized",
113
113
  "ai_discovery_confirmed": false,
114
- "ai_discovery_source": "threat_actor_ai_built",
114
+ "ai_discovery_source": "human_researcher",
115
115
  "ai_assist_factor": "low",
116
116
  "ai_assisted_weaponization": false,
117
117
  "exploit_complexity": "high",
@@ -185,7 +185,7 @@
185
185
  "poc_description": "Public PoC demonstrates kernel-module load via crafted pod spec — attacker controls modprobe argument path.",
186
186
  "weaponization_stage": "demonstrated",
187
187
  "ai_discovery_confirmed": false,
188
- "ai_discovery_source": "human_researcher",
188
+ "ai_discovery_source": "vendor_research",
189
189
  "ai_assist_factor": "low",
190
190
  "ai_assisted_weaponization": false,
191
191
  "exploit_complexity": "low",
@@ -198,7 +198,7 @@
198
198
  "poc_description": "Protect AI Huntr submission — single-request path-traversal against the MLflow artifact-fetch endpoint.",
199
199
  "weaponization_stage": "demonstrated",
200
200
  "ai_discovery_confirmed": false,
201
- "ai_discovery_source": "bug_bounty_ai_augmented",
201
+ "ai_discovery_source": "human_researcher",
202
202
  "ai_assist_factor": "moderate",
203
203
  "ai_assisted_weaponization": false,
204
204
  "exploit_complexity": "low",
@@ -238,7 +238,7 @@
238
238
  "poc_description": "/SetupWizard.aspx/anything one-liner auth bypass; public PoC and Metasploit module within 48 hours of disclosure.",
239
239
  "weaponization_stage": "fully_weaponized",
240
240
  "ai_discovery_confirmed": false,
241
- "ai_discovery_source": "human_researcher",
241
+ "ai_discovery_source": "vendor_research",
242
242
  "ai_assist_factor": "low",
243
243
  "ai_assisted_weaponization": false,
244
244
  "metasploit_module": "exploit/multi/http/connectwise_screenconnect_auth_bypass",
@@ -252,7 +252,7 @@
252
252
  "poc_description": "No public PoC at KEV-listing 2026-05-14. Cisco vendor advisory references observed exploitation by named threat group.",
253
253
  "weaponization_stage": "fully_weaponized",
254
254
  "ai_discovery_confirmed": false,
255
- "ai_discovery_source": "unknown",
255
+ "ai_discovery_source": "human_researcher",
256
256
  "ai_assist_factor": "low",
257
257
  "ai_assisted_weaponization": false,
258
258
  "exploit_complexity": "low",
@@ -292,7 +292,7 @@
292
292
  "poc_description": "Public advisory documents the argv-string concatenation in MCP-client stdio transport; researcher-published PoC chains operator-config to shell-meta injection.",
293
293
  "weaponization_stage": "demonstrated",
294
294
  "ai_discovery_confirmed": false,
295
- "ai_discovery_source": "unknown",
295
+ "ai_discovery_source": "human_researcher",
296
296
  "ai_assist_factor": "low",
297
297
  "ai_assisted_weaponization": false,
298
298
  "exploit_complexity": "low",
@@ -383,7 +383,7 @@
383
383
  "poc_description": "depthfirst-disclosure published PoC at https://github.com/depthfirstdisclosures/nginx-rift — heap buffer overflow in rewrite-directive PCRE unnamed-capture handling. Single HTTP request, no auth.",
384
384
  "weaponization_stage": "fully_weaponized",
385
385
  "ai_discovery_confirmed": true,
386
- "ai_discovery_source": "academic_ai_fuzzing",
386
+ "ai_discovery_source": "bug_bounty_ai_augmented",
387
387
  "ai_assist_factor": "very_high",
388
388
  "ai_discovery_notes": "First publicly-attributed AI-discovered nginx CVE. Discovery by depthfirst autonomous-analysis platform on a code path present in every nginx release for 18 years.",
389
389
  "ai_assisted_weaponization": false,