github.com/hahwul/dalfox/v2

4 results · Feed

• High 7.5
  CVE-2026-45088

  Dalfox: Unauthenticated Arbitrary File Read with Out-of-Band Exfiltration via `custom-payload-file` in Dalfox Server Mode

  Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, when dalfox is run in REST API server mode, the custom-payload-file field in model.Options is JSON-tagged and deserialized directly from the attacker's request bo…

  hahwul dalfox github.com/hahwul/dalfox github.com/hahwul/dalfox/v2 Go
  May 27, 2026
• Critical 10.0
  CVE-2026-45087 Public exploit

  Dalfox: Unauthenticated Remote Code Execution via `found-action` in Dalfox Server Mode

  Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, when dalfox is started in REST API server mode (dalfox server), the server binds to 0.0.0.0:6664 by default and requires no API key unless the operator explicitly…

  hahwul dalfox github.com/hahwul/dalfox github.com/hahwul/dalfox/v2 Go
  May 27, 2026
• High 8.2
  CVE-2026-45089

  Dalfox: Unauthenticated Arbitrary File Create/Append via `output` Option in Dalfox Server Mode

  Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, when dalfox is run in REST API server mode, the output, output-all, and debug fields in model.Options are JSON-tagged and deserialized directly from the attacker'…

  hahwul dalfox github.com/hahwul/dalfox github.com/hahwul/dalfox/v2 Go
  May 27, 2026
• High 7.5
  CVE-2026-45090

  Dalfox: Unauthenticated Remote DoS via Closed-Channel Write in `ParameterAnalysis` (server mode)

  Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, ParameterAnalysis in pkg/scanning/parameterAnalysis.go runs two sequential worker stages that both write to the same results channel. The channel is correctly clo…

  hahwul dalfox github.com/hahwul/dalfox/v2 github.com/hahwul/dalfox Go
  May 27, 2026