socfortress CoPilot.

SOCFortress CoPilot: Authentication Bypass and Missing Authorization on Velociraptor Sigma Exclusion Rules (Detection Suppression)

• socfortress CoPilot
• Authentication bypass
• Broken access control

SOCFortress CoPilot: Arbitrary Host File Write as Root via Path Traversal in the ScoutSuite GCP Report Upload (RCE)

• socfortress CoPilot
• Path traversal
• Unrestricted file upload

SOCFortress CoPilot: Unauthenticated Exposure of ScoutSuite Reports and Uploaded GCP Service-Account Key via Static Mount

• socfortress CoPilot
• Information disclosure
• Authentication bypass

SOCFortress CoPilot: Hardcoded Default Header Secret - Unauthenticated Active-Response Invocation and Alert Injection

• socfortress CoPilot
• Authentication bypass
• Hard-coded credentials

SOCFortress CoPilot: Stored comment and SOC-field XSS permits privileged account takeover

• socfortress CoPilot
• Cross-site scripting (XSS)
• Information disclosure

SOCFortress CoPilot: Cross-Tenant Arbitrary Object-Store Write via the Data-Store Upload Endpoint (customer_user)

• socfortress CoPilot
• Broken access control

SOCFortress CoPilot: Stored case-report template injection permits backend code execution

• socfortress CoPilot
• Code injection
• Broken access control

SOCFortress CoPilot: Hardcoded JWT secret allows unauthenticated full admin compromise and lateral movement into all integrated SOC tools

• socfortress CoPilot
• Authentication bypass
• Hard-coded credentials