New vulnerabilities – clearly explained

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

SOCFortress CoPilot: Arbitrary file write via path traversal in ScoutSuite upload

SOCFortress CoPilot before 0.1.77 passes the uploaded filename of the ScoutSuite GCP report route to the file writer without sanitization. An authenticated admin or analyst can use path traversal in the filename to write the uploaded JSON content outside the report directory. The backend runs as root, so host files can be overwritten and operation disrupted; the demonstrated impact does not establish direct code execution, although the advisory is titled RCE. The CNA and NVD rate the CVE 10.0 (CVSS 3.1), while VulDB rates it 9.9.

SOCFortress · CoPilot

ng-antd-admin: Authentication bypass via hardcoded default JWT secret

ng-antd-admin, an Angular and NestJS administration template, ships with a hardcoded default JWT secret. If a deployment does not replace this secret, an attacker can forge valid tokens, including administrator tokens, without any account. This allows bypassing authentication and authorization, accessing protected API endpoints, and taking over accounts, which can lead to data leakage and unauthorized changes. Version 22.0 rejects the default secret in production but still accepts it with a warning in non-production environments.

huajian123 · ng-antd-admin

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

SOCFortress CoPilot: Stored XSS in alert comments and SOC fields

SOCFortress CoPilot renders user-submitted alert comments and SOC case, asset and health-check fields as raw HTML in the portal. A portal user, including a customer_user, can store script code that runs in the browser of another user who views the affected item, such as an analyst or administrator. According to the CVE description, stolen tokens could enable account takeover and cross-tenant access; this token part is not confirmed by the commit excerpts. The CNA rates the issue CVSS 3.1 9.9 (Critical).

SOCFortress · CoPilot

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.