@blamejs/exceptd-skills 0.21.1 → 0.21.3

package/data/cwe-catalog.json

@@ -94,6 +94,7 @@
       "CVE-2018-19949",
       "CVE-2018-7600",
       "CVE-2018-8414",
+      "CVE-2019-0604",
       "CVE-2019-1068",
       "CVE-2019-11708",
       "CVE-2019-1652",
@@ -137,7 +138,8 @@
       "CVE-2026-32201",
       "CVE-2026-34197",
       "CVE-2026-34910",
-      "CVE-2026-6973"
+      "CVE-2026-6973",
+      "CVE-2026-93952"
     ],
     "framework_controls_partially_addressing": [
       "NIST-800-53-SI-10",
@@ -199,7 +201,9 @@
       "CVE-2019-7194",
       "CVE-2019-7195",
       "CVE-2019-7483",
+      "CVE-2020-14750",
       "CVE-2020-14864",
+      "CVE-2020-14882",
       "CVE-2020-1631",
       "CVE-2020-3452",
       "CVE-2020-36193",
@@ -318,6 +322,7 @@
       "CVE-2016-20017",
       "CVE-2016-6367",
       "CVE-2018-19949",
+      "CVE-2019-0541",
       "CVE-2020-25079",
       "CVE-2020-2509",
       "CVE-2021-1498",
@@ -409,6 +414,7 @@
       "CVE-2019-11001",
       "CVE-2019-12991",
       "CVE-2019-15107",
+      "CVE-2019-15949",
       "CVE-2019-16057",
       "CVE-2019-1652",
       "CVE-2019-16920",
@@ -741,6 +747,7 @@
       "CVE-2019-4716",
       "CVE-2019-7609",
       "CVE-2020-8218",
+      "CVE-2020-8644",
       "CVE-2021-22204",
       "CVE-2021-22205",
       "CVE-2021-3129",
@@ -1090,7 +1097,10 @@
       "CVE-2020-8655",
       "CVE-2021-23874",
       "CVE-2021-25337",
+      "CVE-2021-31199",
+      "CVE-2021-31201",
       "CVE-2021-34484",
+      "CVE-2021-38649",
       "CVE-2021-40450",
       "CVE-2021-41357",
       "CVE-2021-42287",
@@ -1776,7 +1786,10 @@
       "CVE-2014-0196",
       "CVE-2016-5195",
       "CVE-2018-8589",
+      "CVE-2019-0797",
       "CVE-2020-17103-REREGRESSION-2026",
+      "CVE-2020-6819",
+      "CVE-2020-6820",
       "CVE-2021-0920",
       "CVE-2021-21166",
       "CVE-2021-25394",
@@ -1847,13 +1860,16 @@
       "CVE-2018-15982",
       "CVE-2018-4878",
       "CVE-2019-0211",
+      "CVE-2019-0797",
       "CVE-2019-13720",
+      "CVE-2019-1429",
       "CVE-2019-2215",
       "CVE-2019-5786",
       "CVE-2019-8526",
       "CVE-2019-8605",
       "CVE-2020-16017",
       "CVE-2020-6572",
+      "CVE-2020-6819",
       "CVE-2020-9715",
       "CVE-2021-0920",
       "CVE-2021-1048",
@@ -1993,6 +2009,7 @@
       "CVE-2020-13671",
       "CVE-2021-26828",
       "CVE-2021-27860",
+      "CVE-2021-31207",
       "CVE-2024-39717",
       "CVE-2024-50623",
       "CVE-2024-57968",
@@ -2075,6 +2092,7 @@
     ],
     "evidence_cves": [
       "CVE-2015-2590",
+      "CVE-2015-4852",
       "CVE-2015-7450",
       "CVE-2016-8735",
       "CVE-2017-12149",
@@ -2089,12 +2107,14 @@
       "CVE-2019-0344",
       "CVE-2019-10068",
       "CVE-2019-15271",
+      "CVE-2019-18935",
       "CVE-2019-6340",
       "CVE-2019-9874",
       "CVE-2019-9875",
       "CVE-2020-0618",
       "CVE-2020-14644",
       "CVE-2020-2551",
+      "CVE-2020-2555",
       "CVE-2020-2883",
       "CVE-2020-5741",
       "CVE-2020-7961",
@@ -2494,7 +2514,9 @@
       "CVE-2018-5002",
       "CVE-2018-8174",
       "CVE-2018-8373",
+      "CVE-2018-8653",
       "CVE-2019-11043",
+      "CVE-2019-1429",
       "CVE-2019-16928",
       "CVE-2019-3568",
       "CVE-2019-5825",
@@ -2502,8 +2524,10 @@
       "CVE-2019-7287",
       "CVE-2020-0069",
       "CVE-2020-0878",
+      "CVE-2020-0986",
       "CVE-2020-1027",
       "CVE-2020-11261",
+      "CVE-2020-1380",
       "CVE-2020-15999",
       "CVE-2020-16009",
       "CVE-2020-16010",
@@ -2522,6 +2546,7 @@
       "CVE-2021-22555",
       "CVE-2021-25372",
       "CVE-2021-27562",
+      "CVE-2021-28310",
       "CVE-2021-28664",
       "CVE-2021-30632",
       "CVE-2021-30665",
@@ -2876,6 +2901,7 @@
       "CVE-2021-22175",
       "CVE-2021-22986",
       "CVE-2021-27103",
+      "CVE-2021-34473",
       "CVE-2021-39935",
       "CVE-2021-40438",
       "CVE-2022-36551",
@@ -3187,6 +3213,7 @@
     "evidence_cves": [
       "BUG-2026-NIGHTMARE-ECLIPSE-YELLOWKEY",
       "CVE-2021-38647",
+      "CVE-2021-38648",
       "CVE-2026-55040"
     ],
     "last_verified": "2026-05-18",
@@ -3300,6 +3327,7 @@
       "CVE-2015-5287",
       "CVE-2018-8440",
       "CVE-2019-0841",
+      "CVE-2019-0863",
       "CVE-2019-1064",
       "CVE-2019-1069",
       "CVE-2019-1129",
@@ -3403,6 +3431,7 @@
       "CVE-2017-0022",
       "CVE-2017-0101",
       "CVE-2017-1000253",
+      "CVE-2017-11774",
       "CVE-2017-11826",
       "CVE-2017-12240",
       "CVE-2017-15944",
@@ -3420,6 +3449,7 @@
       "CVE-2018-4344",
       "CVE-2018-7445",
       "CVE-2019-0903",
+      "CVE-2019-1214",
       "CVE-2019-1297",
       "CVE-2019-8720",
       "CVE-2020-0796",
@@ -4581,6 +4611,7 @@
     ],
     "related_weaknesses": [],
     "evidence_cves": [
+      "CVE-2020-14883",
       "CVE-2026-82078"
     ],
     "last_verified": "2026-05-19",
@@ -6947,6 +6978,7 @@
     ],
     "skills_referencing": [],
     "evidence_cves": [
+      "CVE-2020-0601",
       "CVE-2022-20703",
       "CVE-2022-26923",
       "CVE-2023-20963",

package/data/exploit-availability.json

@@ -46,7 +46,7 @@
     "poc_description": "Single-stage deterministic root escalation script, reported as 732 bytes. No race condition. Requires unprivileged local code execution.",
     "weaponization_stage": "fully_weaponized",
     "ai_discovery_confirmed": true,
-    "ai_discovery_source": "vendor_research",
+    "ai_discovery_source": "bug_bounty_ai_augmented",
     "ai_assist_factor": "very_high",
     "ai_discovery_notes": "Researcher reports AI system discovery in approximately 1 hour via automated vulnerability analysis",
     "metasploit_module": "unknown",
@@ -111,7 +111,7 @@
     "poc_description": "84 malicious versions published across 42 @tanstack/* packages 2026-05-11 — the worm itself IS the PoC. Payload analysis published by multiple researchers within 20 minutes; SHA-256 anchors and C2 infrastructure documented in cve-catalog.json iocs block.",
     "weaponization_stage": "fully_weaponized",
     "ai_discovery_confirmed": false,
-    "ai_discovery_source": "threat_actor_ai_built",
+    "ai_discovery_source": "human_researcher",
     "ai_assist_factor": "low",
     "ai_assisted_weaponization": false,
     "exploit_complexity": "high",
@@ -185,7 +185,7 @@
     "poc_description": "Public PoC demonstrates kernel-module load via crafted pod spec — attacker controls modprobe argument path.",
     "weaponization_stage": "demonstrated",
     "ai_discovery_confirmed": false,
-    "ai_discovery_source": "human_researcher",
+    "ai_discovery_source": "vendor_research",
     "ai_assist_factor": "low",
     "ai_assisted_weaponization": false,
     "exploit_complexity": "low",
@@ -198,7 +198,7 @@
     "poc_description": "Protect AI Huntr submission — single-request path-traversal against the MLflow artifact-fetch endpoint.",
     "weaponization_stage": "demonstrated",
     "ai_discovery_confirmed": false,
-    "ai_discovery_source": "bug_bounty_ai_augmented",
+    "ai_discovery_source": "human_researcher",
     "ai_assist_factor": "moderate",
     "ai_assisted_weaponization": false,
     "exploit_complexity": "low",
@@ -238,7 +238,7 @@
     "poc_description": "/SetupWizard.aspx/anything one-liner auth bypass; public PoC and Metasploit module within 48 hours of disclosure.",
     "weaponization_stage": "fully_weaponized",
     "ai_discovery_confirmed": false,
-    "ai_discovery_source": "human_researcher",
+    "ai_discovery_source": "vendor_research",
     "ai_assist_factor": "low",
     "ai_assisted_weaponization": false,
     "metasploit_module": "exploit/multi/http/connectwise_screenconnect_auth_bypass",
@@ -252,7 +252,7 @@
     "poc_description": "No public PoC at KEV-listing 2026-05-14. Cisco vendor advisory references observed exploitation by named threat group.",
     "weaponization_stage": "fully_weaponized",
     "ai_discovery_confirmed": false,
-    "ai_discovery_source": "unknown",
+    "ai_discovery_source": "human_researcher",
     "ai_assist_factor": "low",
     "ai_assisted_weaponization": false,
     "exploit_complexity": "low",
@@ -292,7 +292,7 @@
     "poc_description": "Public advisory documents the argv-string concatenation in MCP-client stdio transport; researcher-published PoC chains operator-config to shell-meta injection.",
     "weaponization_stage": "demonstrated",
     "ai_discovery_confirmed": false,
-    "ai_discovery_source": "unknown",
+    "ai_discovery_source": "human_researcher",
     "ai_assist_factor": "low",
     "ai_assisted_weaponization": false,
     "exploit_complexity": "low",
@@ -383,7 +383,7 @@
     "poc_description": "depthfirst-disclosure published PoC at https://github.com/depthfirstdisclosures/nginx-rift — heap buffer overflow in rewrite-directive PCRE unnamed-capture handling. Single HTTP request, no auth.",
     "weaponization_stage": "fully_weaponized",
     "ai_discovery_confirmed": true,
-    "ai_discovery_source": "academic_ai_fuzzing",
+    "ai_discovery_source": "bug_bounty_ai_augmented",
     "ai_assist_factor": "very_high",
     "ai_discovery_notes": "First publicly-attributed AI-discovered nginx CVE. Discovery by depthfirst autonomous-analysis platform on a code path present in every nginx release for 18 years.",
     "ai_assisted_weaponization": false,