Skip to content
OpenAdvisories

Package · Go

github.com/hahwul/dalfox

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2026-45087 Public exploit

    Dalfox: Unauthenticated Remote Code Execution via `found-action` in Dalfox Server Mode

    Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, when dalfox is started in REST API server mode (dalfox server), the server binds to 0.0.0.0:6664 by default and requires no API key unless the operator explicitly…

    hahwul dalfox github.com/hahwul/dalfox github.com/hahwul/dalfox/v2 Go